Commit 46b40957b17 for php.net

commit 46b40957b172eb7bafcdd9e50d804004e485b2db
Merge: a75f28d4791 11047a7a668
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Mon Aug 10 15:08:43 2026 -0400

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix use-after-free when __clone() retains the stylesheet copy

diff --cc NEWS
index ade75459307,6447fa7bc88..299678d0a00
--- a/NEWS
+++ b/NEWS
@@@ -90,15 -83,19 +90,19 @@@ PH
    . Fixed bug GH-15836 (Use-after-free when a user stream filter accesses
      $this->stream during the close flush). (iliaal)

 -- Sysvshm:
 -  . Fixed out-of-bounds write when shm_attach() opens an existing segment with
 -    a size larger than the segment actually is. (David Carlier)
 -
+ - XSL:
+   . Fixed use-after-free when a DOMDocument subclass __clone() retains the
+     stylesheet copy made by XSLTProcessor::importStylesheet(). (iliaal)
+
 -- Zip:
 -  . Fixed ZipArchive::addGlob() and ZipArchive::addPattern() ignoring their
 -    default options when no options array is given. (David Carlier)
 +30 Jul 2026, PHP 8.5.9

 -30 Jul 2026, PHP 8.4.24
 +- Core:
 +  . Fixed bug GH-22290 (AST pretty printing does not correctly handle strings
 +    containing NUL). (iliaal)
 +  . Fixed bug GH-22206 (missing return in global register detection).
 +    (P3p111n0)
 +  . Lock unmodified readonly properties for modification after clone-with.
 +    (NickSdot)

  - BCMath:
    . Fixed GHSA-x692-q9x7-8c3f (Out-of-bounds write in bccomp()).