Ondřej Surý has released updated PHP 8.4.6 and 8.3.20 packages for Debian GNU/Linux 11 (Bullseye) LTS and 12 (Bookworm).
PHP 8.3.20 has fixed several bugs, including use-after-free during dl()'ed module class destruction, dl() of module with aliased class crashes in shutdown, significant performance degradation in 'foreach', weird unpack behavior in DOM, xinclude destruction of live attributes, and issues with embedding on Mac. Fuzzer fixed bug GH-18081, GD fixed bug GH-17984, Intl fixed locale_compose and locale_lookup to work with their array argument with values as references, UConverter::transcode with substitutes as references, Mbstring fixed bug GH-17989, Opcache fixed bug GH-18112, SPL fixed bug GH-18018, and Treewide fixed bug GH-17736. PHP 8.4.6 fixed pointer subtraction for scale, property hook backing value access in multi-level inheritance, accidentally inherited default value in overridden virtual properties, broken JIT polymorphism for property hooks added to child classes, Stack-use-after-return with lazy objects and hooks.