Fix NEWS after 5.3.21
fix bug #63462 (Magic methods called twice for unset protected properties)
Fix bug #64023 (__toString() & SplFileInfo)

Defining a __toString() method was having no effect when concatenating
the object. This was because the cast_object() handler would ignore
__toString().

Using echo() directly would actually use __toString(), but this was a
bug: the ECHO handler would try zend_std_cast_object_tostring() before
cast_object(), but cast_object() should have priority as
zend_std_cast_object_tostring() assumes an object with a
zend_class_entry.
NEWS for bug #64023 (see aa0adce)
Fix bug #64099 (Wrong TSRM usage in zend_register_class_alias)
Merge branch 'PHP-5.3' of git.php.net:/php-src into PHP-5.3
Fixed bug #64106: Segfault on SplFixedArray[][x] = y when extended
This will be PHP 5.3.23
Check if soap.wsdl_cache_dir confirms to open_basedir
Disabled external entities loading
Proper bit reset code