Core
- Fixed GH-18480 (array_splice with large values for offset/length arguments).
- Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
- Fixed OSS-Fuzz #417078295.
- Fixed OSS-Fuzz #418106144.
Curl
- Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
Date
Intl
- Fix various reference issues.
LDAP
- Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
Opcache
OpenSSL
- Fix missing checks against php_set_blocking() in xp_ssl.c.
PDO_OCI
- Fixed bug GH-18494 (PDO OCI segfault in statement GC).
SPL
- Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
Standard
Windows
- Fix leak+crash with sapi_windows_set_ctrl_handler().