PHP Foundation security patch