Commit 5c0a6feca2a for php.net

commit 5c0a6feca2a77225776e88e3552827e2b5037eae
Merge: 48339ab6c24 633fb48fca2
Author: Jakub Zelenka <bukka@php.net>
Date:   Tue Dec 16 15:36:52 2025 +0100

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Update NEWS with info about security issues
      Fix GHSA-www2-q4fc-65wf
      Fix GHSA-h96m-rvf9-jgm2
      Fix GHSA-8xr5-qppj-gvwj: PDO quoting result null deref
      Fix GH-20584: Information Leak of Memory

diff --cc NEWS
index 717abe942ba,e5fe6af0e04..035d0f3576e
--- a/NEWS
+++ b/NEWS
@@@ -82,8 -96,8 +82,10 @@@ PH
      buffer). (Arnaud)

  - PDO:
 +  . Fixed bug GH-20553 (PDO::FETCH_CLASSTYPE ignores $constructorArgs in
 +    PHP 8.5.0). (Girgias)
+   . Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
+     (Jakub Zelenka)

  - Phar:
    . Fixed bug GH-20442 (Phar does not respect case-insensitiveness of