Commit 0dbc4a7953a for php

commit 0dbc4a7953a8aca38d0cf04fa4fb4ac076f00419
Author: Daniel Scherzer <daniel.e.scherzer+phpf@gmail.com>
Date:   Wed Nov 11 10:48:09 2026 -0800

    Update NEWS for use-after-free fixes in ext/openssl

diff --git a/NEWS b/NEWS
index 9a901f31dbb..d1260936dd3 100644
--- a/NEWS
+++ b/NEWS
@@ -89,6 +89,9 @@ PHP                                                                        NEWS
     structures with persistent streams). (cxxz16, David Carlier)
   . Fixed an exception thrown by the session_get_cb stream context callback
     being replaced with a TypeError. (Ilia Alshanetsky)
+  . Fixed use-after-free when a stream is closed by the callback for
+    `early_data_cb`, `psk_client_cb`, `psk_server_cb`, `session_get_cb`, or
+    `session_new_cb`. (DanielEScherzer)

 - PDO_Firebird:
   . Fixed stack buffer overflow with long connection user names, passwords,