upstream 5.5.20

http://php.net/ChangeLog-5.php#5.5.20
CVE-2014-8142