Calendar
- Fixed jewishtojd overflow on year argument.
Core
- Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
- Fixed bug GH-18907 (Leak when creating cycle in hook).
- Fix OSS-Fuzz #427814456.
- Fix OSS-Fuzz #428983568 and #428760800.
Curl
- Fix memory leaks when returning refcounted value from curl callback.
- Remove incorrect string release.
DOM
- Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte).
LDAP
- Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
MbString
- Fixed bug GH-18901 (integer overflow mb_split).
Opcache
- Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
- Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet).
- Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
- Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading).
OpenSSL
- Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
PCNTL
- Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
Phar
- Fix stream double free in phar.
- Fix phar crash and file corruption with SplFileObject.
SOAP
SPL
- Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
Standard
- Fix misleading errors in printf().
- Fix RCN violations in array functions.
- Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
Streams
- Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
Zip
- Fix leak when path is too long in ZipArchive::extractTo().