- Core:

. Fixed GH-18480 (array_splice with large values for offset/length arguments).

. Partially fixed GH-18572 (nested object comparisons leading to stack overflow).

. Fixed OSS-Fuzz #417078295.

. Fixed OSS-Fuzz #418106144.

- Curl:

. Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/CURLOPT_PASSWORD set the Authorization header when set to NULL).

- Date:

. Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct)

. Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).

- Intl:

. Fix various reference issues.

- LDAP:

. Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).

- Opcache:

. Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).

. Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).

. Fix leak of accel_globals->key.

- OpenSSL:

. Fix missing checks against php_set_blocking() in xp_ssl.c.

- PDO_OCI:

. Fixed bug GH-18494 (PDO OCI segfault in statement GC).

- SPL:

. Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).

- Standard:

. Fixed bug GH-17403 (Potential deadlock when putenv fails).

. Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).

- Zip:

. Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).

. Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).