CLSA-2026-1792616669 php: Fix of 2 CVEs

CVE-2026-92842: fix out-of-bounds read in convert. stream filters when line-break-chars contains a NUL byte - CVE-2026-93682: fix out-of-bounds read on empty Location header in HTTP stream wrapper redirects...