@JorisMeys@mstdn.social from what I understand somebody broke the embargo and shipped fixed binaries early. It's in there: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/