[ci skip] NEWS and UPGRADING for mb_*trim

Update NEWS

PSpell has been moved to PECL

- https://github.com/php/pecl-text-pspell
- https://pecl.php.net/package/pspell

Add NEWS entry

Mention correct bug number

I'm tired

ext/standard: Fix GH-9316

http_build_query() default null argument for is implicitly coerced to string

Closes GH-9316

PHP 8.3 is now 8.3.1-dev

Prepare NEWS for 8.3.0

Revert incomplete PG pipeline addition

Closes GH-12735

Refactor checks for fpathconf and pathconf

These two might not be available everywhere so we check them in
config.m4 when doing the configure step. Check is skipped for musl libc
due

Refactor checks for fpathconf and pathconf

These two might not be available everywhere so we check them in
config.m4 when doing the configure step. Check is skipped for musl libc
due to limited implementation.

Constants that are defined into main/php_config.h:
HAVE_FPATHCONF
HAVE_PATHCONF

Implemented via GH-10238
Related to GH-10350
Fixes GH-12725

show more ...

Fix in-place modification of filename in php_message_handler_for_zend

php_strip_url_passwd modifies url in-place. We cannot assume from
php_message_handler_for_zend that data is a tempor

Fix in-place modification of filename in php_message_handler_for_zend

php_strip_url_passwd modifies url in-place. We cannot assume from
php_message_handler_for_zend that data is a temporary, modifiable string.

Fixes oss-fuzz #64209
Closes GH-12733

show more ...

Fix use-after-free of name in var-var with malicious error handler

Fixes oss-fuzz #54325
Closes GH-12732

Fix GH-11992: utf_encodings.phpt fails on Windows 32-bit

Similar bug as before in #10776, but now in other code.

Closes GH-12726.

Fix GH-12721: SplFileInfo::getFilename() segfault in combination with GlobIterator and no directory separator

This broke in 7cd8879 and 9bae9ab. NULL is a perfectly valid return
value th

Fix GH-12721: SplFileInfo::getFilename() segfault in combination with GlobIterator and no directory separator

This broke in 7cd8879 and 9bae9ab. NULL is a perfectly valid return
value that should be handled.

Closes GH-12722.

show more ...

Fix #50713: openssl_pkcs7_verify() may ignore untrusted CAs

Closes GH-12499

Fix GH-12616: DOM: Removing XMLNS namespace node results in invalid default: prefix

The namespace data is freed and set to NULL, but there remain references
to the namespace declaration

Fix GH-12616: DOM: Removing XMLNS namespace node results in invalid default: prefix

The namespace data is freed and set to NULL, but there remain references
to the namespace declaration nodes. This (rightfully) confuses libxml2
because its invariants are broken. We also have to remove all remaining
references from the subtree. This fixes the data corruption bug.

Closes GH-12681.

show more ...

Fix GH-12702: libxml2 2.12.0 issue building from src

Fixes GH-12702.

Co-authored-by: nono303 <github@nono303.net>

Fix bug #79945: Stream wrappers in imagecreatefrompng causes segfault

Closes GH-12696

Add POSIX_SC_CHILD_MAX and POSIX_SC_CLK_TCK constants

Closes GH-12689

Fix GH-12675: MEMORY_LEAK in phpdbg_prompt.c

Have to use file_put_contents() instead of --FILE-- because we have to
actually load it using the exec command, *and* have to make multiple

Fix GH-12675: MEMORY_LEAK in phpdbg_prompt.c

Have to use file_put_contents() instead of --FILE-- because we have to
actually load it using the exec command, *and* have to make multiple
files, and note that we can only load files relative from the current
directory, so we can't rely on files being in the sapi/phpdbg/tests
folder.

Closes GH-12680.

show more ...

NEWS

NEWS

NEWS

[RFC] DOM HTML5 parsing and serialization support (#12111)

Fix GH-12655: proc_open() does not take into account references in the descriptor array

Closes GH-12658.