Calendar
- Fixed jdtogregorian overflow.
- Fixed cal_to_jd julian_days argument overflow.
COM
- Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
Core
- Fail early in *nix configuration build script.
- Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
- Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
- Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
- Fix is_zend_ptr() huge block comparison.
- Fixed potential OOB read in zend_dirname() on Windows.
Curl
- Fixed bug GH-16802 (open_basedir bypass using curl extension).
- Fix various memory leaks in curl mime handling.
DOM
FPM
- Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
GD
- Fixed GH-16776 (imagecreatefromstring overflow).
GMP
- Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
Hash
- Fixed GH-16711: Segfault in mhash().
Opcache
OpenSSL
- Prevent unexpected array entry conversion when reading key.
- Fix various memory leaks related to openssl exports.
- Fix memory leak in php_openssl_pkey_from_zval().
PDO
- Fixed memory leak of `setFetchMode()`.
Phar
- Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
PHPDBG
- Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
SAPI
- Fixed bug GH-16998 (UBSAN warning in rfc1867).
SimpleXML
- Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input).
SOAP
- Fix make check being invoked in ext/soap.
Standard
Streams
- Fixed network connect poll interuption handling.
Windows
- Fixed bug GH-16849 (Error dialog causes process to hang).