Commit c91cc1a25df for php.net

commit c91cc1a25dfb7dd8c10e1524fdb877b172198a1c
Merge: 333ac228803 12b1f654db6
Author: Weilin Du <weilindu@php.net>
Date:   Thu Aug 27 00:12:16 2026 +0800

    Merge branch 'PHP-8.4' into PHP-8.5

    * origin/PHP-8.4:
      Fix GH-23418: UAF when accessing mounted Phar subdirectories (#23442)

diff --cc NEWS
index 9054fd40bfd,935b3123489..3b865718f09
--- a/NEWS
+++ b/NEWS
@@@ -46,15 -52,19 +46,19 @@@ PH
    . Fixed a leak when a persistent connection failed a liveness check
      with no other live PDO handle. (iliaal)

+ - Phar:
+   . Fixed bug GH-23418 (Use-after-free when looking up mounted directories).
+     (Weilin Du)
+
 -- Standard:
 -  . Fixed a memory leak in array_merge_recursive() when the recursive merge of
 -    an object converted to an array fails. (David Carlier)
 +- Readline:
 +  . Fixed the interactive shell not waiting for the pager process to exit.
 +    (Weilin Du)

  - Zip:
 +  . Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive
 +    is freed while the stream is still open). (Eyüp Can Akman)
    . Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be
      garbage collected). (Weilin Du, ndossche)
 -  . Fixed ZipArchive::extractTo() and ZipArchive::getFrom*() reporting success
 -    on corrupted entries. (David Carlier)

  - SAPI:
    . Fixed fuzzer targets failing to build in isolation. (Mrmaxmeier)