Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:87998
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.220.46 as permitted sender)
To: PHP Internals <internals@lists.php.net>
Message-ID: <55E610C1.1000203@gmail.com>
Date: Tue, 1 Sep 2015 13:55:29 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0)
 Gecko/20100101 Thunderbird/38.2.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Subject: Heads up: merging security patches to 7
From: smalyshev@gmail.com (Stanislav Malyshev)

Hi!

I've recently committed a number of fixes to 5.x branch. These fixes
mainly concern (un)serialization scenarios, you can see the full list in
5.4/5.5 NEWS. These changes are not merged yet to master/7.0 since due
to extensive differences between 5.x and 7 in zval handling, they
basically must be rewritten for 7. I don't want to commit completely
broken code to master, so I'll work on at least getting it to a state
where there is no new breakage and then porting the fixes properly to 7,
but that can take a couple of days. In the meantime, please be aware
that 5.x and master may not be in full sync and exercise caution if you
merge stuff from 5 to 7.
-- 
Stas Malyshev
smalyshev@gmail.com