Commit 1c5b0e5b128 for php

commit 1c5b0e5b128ca0c762ba554141dbca3245651005
Merge: 2762817831d 17b4c5f4f19
Author: ndossche <7771979+ndossche@users.noreply.github.com>
Date:   Thu Oct 22 16:37:15 2026 +0200

    Merge branch 'PHP-8.5' into PHP-8.6

    * PHP-8.5:
      Fix GH-24508: HTTP wrapper leaks dechunk filter when header parsing fails

diff --cc NEWS
index 9f6000dfb91,db11f661ca5..89946675270
--- a/NEWS
+++ b/NEWS
@@@ -1,21 -1,8 +1,23 @@@
  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 -?? ??? ????, PHP 8.5.13
 +?? ??? ????, PHP 8.6.0RC5
 +
 +- PDO_PGSQL:
 +  . Fixed bug GH-24461 (DISCARD ALL on persistent connection cleanup drops
 +    PgBouncer's prepared statements). (David Carlier, Artem Ukrainskiy)
 +
 +- Streams:
 +  . Fixed bug GH-24506 (stream_select() leaks a stream-error operation level
 +    on its FD_SETSIZE failure path). (azjezz)
++  . Fixed bug GH-24508 (HTTP wrapper leaks the dechunk filter when header
++    parsing fails after Transfer-Encoding). (bercedev)
 +
 +21 Oct 2026, PHP 8.6.0RC4

  - Core:
 +  . Fixed GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp (Avoid state corruption via
 +    bailout). (CVE-2026-109618, CVE-2026-109619) (Arnaud, ilutov, Jakub Zelenka,
 +    ndossche, Nicolas Grekas)
    . Fixed bug GH-24184 (System ID not being reinitialized after an Apache
      graceful restart, potentially causing incompatible OPcache file cache
      entries to be reused). (Levi Morrison)