Commit 3323b8db05d for php

commit 3323b8db05d51899069b7b715e10da6fc1da29d5
Merge: 688a99a61db 2b99297b764
Author: Jakub Zelenka <bukka@php.net>
Date:   Fri Oct 30 12:52:22 2026 +0100

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      ext/standard: Validate objects before queuing unserialize callbacks

diff --cc NEWS
index ff2c6cb7c4d,a654cec2f39..4db408f8772
--- a/NEWS
+++ b/NEWS
@@@ -234,8 -248,14 +234,10 @@@ PH
  - Standard:
    . Fixed memory leaks in checkdnsrr() and dns_check_record() on Windows.
      (Ilia Alshanetsky)
+   . Fixed __unserialize() and __wakeup() being called for objects with a missing
+     closing brace. (Ilia Alshanetsky)
    . Fixed bug GH-24308 (Request shutdown calls closelog() even when syslog
      was not opened by PHP). (lazerg)
 -  . Fixed bug GH-24399 (usleep() and time_nanosleep() ignore queued APCs on
 -    Windows). (Nicolas Grekas)
 -  . Fixed chown() and lchown() failing to resolve user names in ZTS builds
 -    when getpwnam_r() needs a larger buffer. (Ilia Alshanetsky)
    . Fixed password_get_info() and password_needs_rehash() accepting malformed
      bcrypt costs. (Ilia Alshanetsky)
    . Fixed proc_open() null descriptor not being inheritable on Windows.