- Fixed bug #50363 (Invalid parsing in convert.quoted-printable-decode filter)
Patch by: slusarz at curecanti dot org

- Fix #54721, different Hashes on Windows, BSD and Linux on wrong Salt size

- Add CVE to bug entry

- Fixed stack buffer overflow in socket_connect().
Found by: Mateusz Kocielski, Marek Kroemeke and Filip Palian

Arithmetic speedup. Inlined most probable code-paths for arithmetic operations directly into executor.

- Fixed bug #54529 (SAPI crashes on apache_config.c:197)
patch by: hebergement at riastudio dot fr

- Fixed bug #54269 (Short exception message buffer causes crash)

Increase the overly conservative pcre backtrack limit from 100000 to 1000000

- Fixed bug #54895 (Fix compiling with older gcc version without need for membar_producer macro)
patch by: mhei at heimpold dot de

Allow management of your own padding in openssl_encrypt/decrypt.

For using mcrypt / openssl interchangeabley managing your own padding is the only solution.

- Fixed bug #54804 (__halt_compiler and imported namespaces) (Pierrick)

Fix bug 54866

Should probably have a note on the autoconf 2.60+ requirement here

Decouple <?= from the short_tags setting and make it always enabled

- Fix Bug #53782 (foreach throws irrelevant exception)

Update bundled PCRE to 8.12

Update bundled SQLite to 3.7.6.2

Fixed bug #54723 - getimagesize() doesn't check the full ico signature and misreports mpg files

here comes the news

- Fix bug #54644 (wrong pathes in php_pdo_mysql_int.h)

- BFN #54681

- Fixed bug #54580 (get_browser() segmentation fault when the browscap ini
directive is set in activation time). This commit fixes this by adding a per
request parsing of the browscap fil

- Fixed bug #54580 (get_browser() segmentation fault when the browscap ini
directive is set in activation time). This commit fixes this by adding a per
request parsing of the browscap file that's when get_browser is called the
first time and the directive is set on activation time.w

show more ...

- Fixed bug #54623 (Segfault when when writing to a persistent socket after
closing a copy of the socket).

Added support for CURLOPT_MAX_RECV_SPEED_LARGE and CURLOPT_MAX_SEND_SPEED_LARGE. FR #51815
# MFH. This addition was already committed to trunk and is backported as requested in #54622

#doc
Added 3rd parameter to filter_var_array() and filter_input_array()
functions that allows disabling addition of empty elements