delta/php-git.git, branch php-5.5.28

5.5.28

2015-08-05T06:58:00+00:00

Merge branch 'PHP-5.4' into PHP-5.5

2015-08-04T23:45:32+00:00

* PHP-5.4:
  fix test

fix test

2015-08-04T23:45:20+00:00

Merge branch 'PHP-5.4' into PHP-5.5

2015-08-04T23:13:43+00:00

* PHP-5.4:
  __wakeup doesn't have to be final

__wakeup doesn't have to be final

2015-08-04T23:13:26+00:00

update NEWS

2015-08-04T22:22:59+00:00

Merge branch 'PHP-5.4' into PHP-5.5

2015-08-04T21:46:30+00:00

* PHP-5.4:
  fix test
  update NEWS

fix test

2015-08-04T21:46:19+00:00

update NEWS

2015-08-04T21:37:28+00:00

Merge branch 'PHP-5.4' into PHP-5.5

2015-08-04T21:10:57+00:00

* PHP-5.4:
  Fix bug #70019 - limit extracted files to given directory
  Do not do convert_to_* on unserialize, it messes up references
  Fix #69793 - limit what we accept when unserializing exception
  Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
  Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
  ignore signatures for packages too
  Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
  Fixed bug #69892
  Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
  Improved fix for Bug #69441
  Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
  Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
  Fix bug #70081: check types for SOAP variables

Conflicts:
	.gitignore
	ext/date/php_date.c
	ext/spl/spl_array.c
	ext/spl/spl_observer.c