CLSA-2026-1791281631 php: Fix of 9 CVEs

CVE-2026-92842: fix heap out-of-bounds read in convert. stream filters with a NUL byte in line-break-chars GHSA-88hq-2827-7pg6 - CVE-2026-91768: compare all 128 bits of IPv6 addresses against FastCGI listen.allowedclients GHSA-62xp-839h-2637 - CVE-2026-91769: do not fall back to the certificate...