Curl
- Fix curl build and test failures with version 8.16.
Opcache
- Reset global pointers to prevent use-after-free in zend_jit_status().
PDO
- Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
Standard
- Fixed GHSA-www2-q4fc-65wf (Null byte termination in dns_get_record()).
- Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178)
- Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177)