All pull requests

Pull requests

• Fix GH-24458: quoted_printable_encode does not encode trailing space

  Extension: standard
  #24459·lazerg opened Oct 20, 2026Contributor·

  ·

• JIT: Fix TLS access with SHM reattachment (8.6 follow-up)

  Extension: opcache
  #24456·arnaud-lb opened Oct 20, 2026Member·

  ·

• Fix array_udiff_assoc() and array_uintersect_assoc() clobbering the user comparison callback

  Extension: standard
  #24453·lacatoire opened Oct 20, 2026Member·

  ·

• ext/standard: serialize() context reused by destructors during teardown.

  Extension: standard
  #24452·devnexen opened Oct 20, 2026Member·

  ·

• JIT: Fix OP_DATA read from an unwritten slot in zend_jit_assign_dim_op()

  Extension: opcache
  #24451·waroad opened Oct 20, 2026·

  ·
  1

  1

• LiteSpeed: document security considerations for executed paths

  Category: DocumentationSAPI: litespeed
  #24450·DanielEScherzer opened Oct 19, 2026Member·

  ·

• ext/mysqlnd: Use relaxed atomics for statistics in ZTS builds

  ABI breakExtension: mysqlnd
  #24448·ArtUkrainskiy opened Oct 19, 2026Contributor·

  ·
  1

  6

• Fix serialize() throwing for arrays that refer to themselves through references of refcount 1

  Extension: standard
  #24446·lacatoire opened Oct 19, 2026Member·

  ·

• ext/gd: keep the brush and tile images alive while the destination uses them

  Extension: gd
  #24444·lacatoire opened Oct 19, 2026Member·

  ·
  1

• ext/intl: IntlNumberFormatter::format() unbounded allocation on expon…

  Extension: intl
  #24443·devnexen opened Oct 19, 2026Member·

  ·
  1

• Fix quoted_printable_encode() exceeding the line length for bytes 0xF5 to 0xFF

  Extension: standard
  #24442·auraseb opened Oct 19, 2026·

  ·
  1

• ext/standard: Preserve explicit URL port zero

  Extension: standard
  #24440·iliaal opened Oct 19, 2026Member·

  ·

• ext/standard: Reject overflowing stream timeout sums

  Extension: standard
  #24439·iliaal opened Oct 19, 2026Member·

  ·

• Zend: always populate error pointer on failure of zend_is_callable()

  Category: EngineExtension: curlExtension: opensslExtension: pdo (core)
  #24435·Girgias opened Oct 19, 2026Member·

  ·

• ext/curl: Propagate multipart field construction errors

  Extension: curl
  #24434·iliaal opened Oct 19, 2026Member·

  ·

• ext/standard: Validate objects before queuing unserialize callbacks

  Extension: dateExtension: standard
  #24433·iliaal opened Oct 19, 2026Member·

  ·

• Fix GH-23956: Regression with MySQL 4.1 after mysqlnd security fix

  Extension: mysqliExtension: mysqlnd
  #24432·jeroenvdkolff opened Oct 19, 2026·

  ·

• ext/pdo: Validate Oracle null handling modes

  Extension: pdo (core)
  #24431·iliaal opened Oct 19, 2026Member·

  ·
  2

• std: throw ValueError on invalid INI scanner mode

  Extension: standard
  #24429·Girgias opened Oct 19, 2026Member·

  ·

• TSRM: attach pthread_key/fls callbacks for thread cleanup

  ABI breakCategory: Build SystemCategory: Engine
  #24428·henderkes opened Oct 19, 2026Contributor·

  ·
  19

• Fix use-after-free of CURLOPT_STDERR stream on cloned curl handle

  Extension: curl
  #24427·lacatoire opened Oct 19, 2026Member·

  ·

• Fix fiber switch corrupting user comparator globals in sort functions

  ABI breakExtension: standard
  #24426·lacatoire opened Oct 19, 2026Member·

  ·
  1

• Fix GH-21974: Avoid destroying shared functions in ZTS

  Category: EngineSAPI: fpm
  #24425·Sree24-ui opened Oct 19, 2026·

  ·
  1

• Fix glob() not negating bracket expressions that start with "^"

  Extension: standard
  #24422·nicolas-grekas opened Oct 19, 2026Contributor·

  ·
  2

• Fix GH-24397: Clear vacated MERGE inputs in _zend_jit_fix_merges()

  Extension: opcache
  #24419·iliaal opened Oct 18, 2026Member·

  ·
  1

  1