[php-src] PR #24771: Fix CVE-2026-109619 and improve session error handling
| From: | SleepTheGod | Date: | Tue, 27 Oct 2026 03:27:29 +0000 |
| Subject: | [php-src] PR #24771: Fix CVE-2026-109619 and improve session error handling | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39946@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24771
Author: SleepTheGod
Added handling for CVE-2026-109619 to clear request-scoped rfc1867 state and prevent stale
pointers/flags from persisting across requests. Implemented error handling for out-of-memory
conditions during session initialization and cleanup.