All pull requests

Pull requests

• Shutdown already started modules when a later module init fails

  #25157·dunglas opened Nov 2, 2026Member·

  ·

• ext/pdo_pgsql: Clear the notice callback when a persistent handle is released

  Extension: pdo_pgsql
  #25156·iliaal opened Nov 2, 2026Member·

  ·

• ext/dba: Fix request memory kept in persistent dba handles

  Extension: dba
  #25155·iliaal opened Nov 2, 2026Member·

  ·

• fpm: fix event queue use-after-free in select and poll backends

  SAPI: fpm
  #25154·iliaal opened Nov 2, 2026Member·

  ·

• ext/date: Fix strtotime() handling of embedded NUL bytes

  Extension: date
  #25153·arshidkv12 opened Nov 2, 2026Contributor·

  ·

• Fix GH-25148: Blocking socket fread() reports timed_out on Windows after returning buffered data

  Extension: standard
  #25152·jack-worman opened Nov 2, 2026·

  ·

• Fix GH-25149: Leak of class constant type names in uncached classes

  Category: EngineExtension: opcache
  #25151·lazerg opened Nov 2, 2026Contributor·

  ·

• Make SECURITY.md the complete vulnerability disclosure policy

  #25146·bukka opened Nov 2, 2026Member·

  ·

• uri: Update to uriparser-1.0.3

  Extension: uri
  #25145·TimWolla opened Nov 2, 2026Member·

  ·

• Fix GH-25024: backport mb_ereg_replace() \k<name> OOB-read clamp to PHP-8.2/8.3

  Extension: mbstring
  #25143·dhrupo opened Nov 2, 2026·

  ·
  2

• sapi/cli: php_cli_server_client_save_header() crash on repeated headers.

  SAPI: cli
  #25142·devnexen opened Nov 2, 2026Member·

  ·
  1

  4

• Zend: throw exception for AST error

  Category: Engine
  #25141·Girgias opened Nov 2, 2026Member·

  ·
  1

• [PHP-8.4] Backports for OpenSSL 4.1

  Extension: openssl
  #25140·thesamesam opened Nov 1, 2026·

  ·
  1

• [PHP-8.5] Backports for OpenSSL 4.1

  Extension: openssl
  #25139·thesamesam opened Nov 1, 2026·

  ·
  3

• Fix GH-25137: Reject malformed SNMP ports

  Extension: snmp
  #25138·somethingwithproof opened Nov 1, 2026Contributor·

  ·
  1

• opcache: preserve cv values across jit assignments and cse

  Extension: opcache
  #25136·aasul opened Nov 1, 2026Contributor·

  ·
  1

• curl: improve option value validation for curl_setopt()

  Extension: curl
  #25133·Girgias opened Nov 1, 2026Member·

  ·

• Fix FFI calling conventions inside nested declarators

  Extension: ffi
  #25126·nicolas-grekas opened Nov 1, 2026Contributor·

  ·

• ext/dom: Dom\HTMLDocument::createFromString() crash on OOM.

  Extension: dom
  #25124·devnexen opened Nov 1, 2026Member·

  ·

• ext/strmatch: Add prepared string matching and replacement

  Category: Build SystemStatus: Requires RFC
  #25122·ArtUkrainskiy opened Nov 1, 2026Contributor·

  ·

• Fix GH-25112 Phar CGI redirect target

  Extension: phar
  #25117·kairosci opened Nov 1, 2026Contributor·

  ·

• ext/standard: Preserve foreach iterators on array_unshift

  Category: EngineExtension: standard
  #25116·arshidkv12 opened Nov 1, 2026Contributor·

  ·

• zend_memnstr: Use a compact Sunday shift table for short needles

  Category: EngineExtension: standard
  #25115·ArtUkrainskiy opened Oct 31, 2026Contributor·

  ·

• ext/openssl: Fix GH-9317: OpenSSL config path does not respect open_basedir

  Extension: openssl
  #25114·Roman3349 opened Oct 31, 2026Contributor·

  ·
  1

• ext/openssl: Fix GH-25088: SNI server contexts do not inherit the base policy

  Extension: openssl
  #25113·Roman3349 opened Oct 31, 2026Contributor·

  ·
  1