5 people 506e87fa7d Avoid state corruption via bailout ...

- Replace bailout on OOM with UnwindExit
- Properly reset various globals that may be accessed during startup

Fix GHSA-w8hw-w9fx-j79w (CVE-2026-109618)
Fix GHSA-6wmf-4rv5-p3rp (CVE-2026-109619)

Co-authored-by: Ilija Tovilo <ilija.tovilo@me.com>
Co-authored-by: Jakub Zelenka <bukka@php.net>
Co-authored-by: Nora Dossche <7771979+ndossche@users.noreply.github.com>
Co-authored-by: Nicolas Grekas <nicolas.grekas@gmail.com>

2026-10-18 19:23:32 +02:00

..

apache2handler

Autotools: Obsolete PHP_TEST_BUILD, PHP_BUILD_THREAD_SAFE, and PHP_DEF_HAVE (#15802)

2024-09-08 21:09:48 +02:00

cgi

sapi/*/Makefile.frag: install programs built with libtool, with libtool

2026-02-23 17:19:23 +01:00

cli

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

embed

Merge branch 'PHP-8.3' into PHP-8.4

2025-03-12 08:58:54 +01:00

fpm

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

fuzzer

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

litespeed

sapi/lsapi: fix returns uninitialized value (#23281)

2026-08-15 01:02:07 +09:00

phpdbg

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00