Related (where you already posted a bit of this):

Today's PHP security release, and how we're strengthening security

https://news.ycombinator.com/item?id=50182987