Commit 73eace2398f for php.net

commit 73eace2398f211be74bfc5fbf48577aeacbe754e
Merge: f90e532f368 1a428e528f9
Author: Tim Düsterhus <tim@bastelstu.be>
Date:   Sun Apr 12 19:53:24 2026 +0200

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix GH-21731: Random\Engine\Xoshiro256StarStar::__unserialize() accepts all-zero state (#21732)

diff --cc NEWS
index 9da98b15f20,24846881de9..3a05582ffb4
--- a/NEWS
+++ b/NEWS
@@@ -30,9 -29,12 +30,13 @@@ PH
    . Fixed faulty returns out of zend_try block in zend_jit_trace(). (ilutov)

  - OpenSSL:
 +  . Fix memory leak regression in openssl_pbkdf2(). (ndossche)
    . Fix a bunch of memory leaks and crashes on edge cases. (ndossche)

+ - Random:
+   . Fixed bug GH-21731 (Random\Engine\Xoshiro256StarStar::__unserialize()
+     accepts all-zero state). (iliaal)
+
  - SPL:
    . Fixed bug GH-21499 (RecursiveArrayIterator getChildren UAF after parent
      free). (Girgias)