also add previous secfixes
backport !39582 (merged)
https://www.php.net/archive/2022.php#2022-09-29-1