SECURITY UPDATE: code execution via state corruption after an
out-of-memory error and via stale global state
debian/patches/CVE-2026-109618.patch: terminate the process on memory
limit and allocation overflow errors instead of unwinding, clear
request globals at shutdown, disable session upload progress, keep
only the Content-Disposition and Content-Type multipart part headers
and start request variable arrays with one slot. Also fix
array_merge_recursive() duplicating integer keys (bug #76505): for
hash sub-arrays it now appends after the largest integer key, as
PHP 7.1.20 and later do.