All pull requests

Pull requests

• LiteSpeed: document security considerations for executed paths

  Category: DocumentationSAPI: litespeed
  #24450·DanielEScherzer opened Oct 19, 2026Member·

  ·

• ext/mysqlnd: Use relaxed atomics for statistics in ZTS builds

  ABI breakExtension: mysqlnd
  #24448·ArtUkrainskiy opened Oct 19, 2026Contributor·

  ·
  1

• Fix serialize() throwing for arrays that refer to themselves through references of refcount 1

  Extension: standard
  #24446·lacatoire opened Oct 19, 2026Member·

  ·

• ext/gd: keep the brush and tile images alive while the destination uses them

  Extension: gd
  #24444·lacatoire opened Oct 19, 2026Member·

  ·

• ext/intl: IntlNumberFormatter::format() unbounded allocation on expon…

  Extension: intl
  #24443·devnexen opened Oct 19, 2026Member·

  ·

• Fix quoted_printable_encode() exceeding the line length for bytes 0xF5 to 0xFF

  Extension: standard
  #24442·auraseb opened Oct 19, 2026·

  ·

• ext/standard: Preserve explicit URL port zero

  Extension: standard
  #24440·iliaal opened Oct 19, 2026Member·

  ·

• ext/standard: Reject overflowing stream timeout sums

  Extension: standard
  #24439·iliaal opened Oct 19, 2026Member·

  ·

• Zend: always populate error pointer on failure of zend_is_callable()

  Category: EngineExtension: curlExtension: opensslExtension: pdo (core)
  #24435·Girgias opened Oct 19, 2026Member·

  ·

• ext/curl: Propagate multipart field construction errors

  Extension: curl
  #24434·iliaal opened Oct 19, 2026Member·

  ·

• ext/standard: Validate objects before queuing unserialize callbacks

  Extension: dateExtension: standard
  #24433·iliaal opened Oct 19, 2026Member·

  ·

• Fix GH-23956: Regression with MySQL 4.1 after mysqlnd security fix

  Extension: mysqliExtension: mysqlnd
  #24432·jeroenvdkolff opened Oct 19, 2026·

  ·

• ext/pdo: Validate Oracle null handling modes

  Extension: pdo (core)
  #24431·iliaal opened Oct 19, 2026Member·

  ·

• std: throw ValueError on invalid INI scanner mode

  Extension: standard
  #24429·Girgias opened Oct 19, 2026Member·

  ·

• TSRM: attach pthread_key/fls callbacks for thread cleanup

  ABI breakCategory: Engine
  #24428·henderkes opened Oct 19, 2026Contributor·

  ·
  16

• Fix use-after-free of CURLOPT_STDERR stream on cloned curl handle

  Extension: curl
  #24427·lacatoire opened Oct 19, 2026Member·

  ·

• Fix fiber switch corrupting user comparator globals in sort functions

  Extension: standard
  #24426·lacatoire opened Oct 19, 2026Member·

  ·

• Fix GH-21974: Avoid destroying shared functions in ZTS

  Category: EngineSAPI: fpm
  #24425·Sree24-ui opened Oct 19, 2026·

  ·
  1

• Fix glob() not negating bracket expressions that start with "^"

  Extension: standard
  #24422·nicolas-grekas opened Oct 19, 2026Contributor·

  ·
  2

• Fix GH-24397: Clear vacated MERGE inputs in _zend_jit_fix_merges()

  Extension: opcache
  #24419·iliaal opened Oct 18, 2026Member·

  ·
  1

  1

• zend_test: support grouped use statements in compile_to_ast

  Category: EngineExtension: zend_test
  #24418·mainframe98 opened Oct 18, 2026·

  ·

• docs: use private staging repos for stable release tagging and tarballs

  #24415·bukka opened Oct 18, 2026Member·

  ·

• sapi/cli/tests: use kill -0 in pdeathsig test

  SAPI: cli
  #24413·Sjord opened Oct 18, 2026Contributor·

  ·

• Tracing JIT: give the type guard on entry of an inlined call an exit opline

  Extension: opcache
  #24411·waroad opened Oct 18, 2026·

  ·
  1

• ext/iconv, ext/standard: make tests more robust on FreeBSD

  Extension: iconvExtension: standard
  #24406·Sjord opened Oct 18, 2026Contributor·

  ·
  1