Commit e353b8bed45 for php.net

commit e353b8bed45a3664e5538c049cfb48e0e003b487
Merge: e382e51ac22 d19f248f8ef
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Tue Aug 18 14:26:58 2026 -0400

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix GH-23331: UAF when an attribute child keeps a live wrapper

diff --cc NEWS
index c7f1fd69259,182c80517b0..0fba79b14e9
--- a/NEWS
+++ b/NEWS
@@@ -9,8 -9,8 +9,10 @@@ PH
  - DOM:
    . Fixed a use-after-free when cloning a DOMNameSpaceNode after
      DOMDocument::xinclude(). (iliaal)
 +  . Fixed a crash in DOMXPath when a php:function callback receives a nodeset
 +    and a later callback returns a node from another document. (iliaal)
+   . Fixed bug GH-23331 (UAF when node_list_unlink() skips attribute children
+     that still have a live wrapper). (iliaal)

  - Intl:
    . Fixed a double-free when IntlGregorianCalendar construction fails after