update NEWS

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Fix bug #68027 - fix date parsing in XMLRPC lib
Fixed bug #68044: Integer overflow in unserialize() (32-bits only)
Fix bug #68089 - do not accept options with embedded \0

Conflicts:
	ext/curl/interface.c
Fix bug #68113 (Heap corruption in exif_thumbnail())
Fix bug #68283: fileinfo: out-of-bounds read in elf note headers

Upstream commit
https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0

CVE -2014-3710
NEWS
fix NEWS & version
set default response code to 200
Initialize the offset table - PCRE may sometimes miss offsets
Fix bug #63595 GMP memory management conflicts with other libraries using GMP

Drop use of php memory allocators as this raise various conflicts
with other extensions and libraries which use libgmp.

No other solution found.
We cannot for ensure correct use of allocator with shared lib.

Some memory can allocated before php init
Some memory can be freed after php shutdown

Known broken run cases
- php + curl + gnutls + gmp
- mod_gnutls + mod_php + gnutls + gmp
- php + freetds + gnutls + gmp
- php + odbc + freetds + gnutls + gmp
- php + php-mapi (zarafa) + gnutls + gmp
update NEWS
Partial fix for bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy)
update NEWS
Fixed bug #66584 Segmentation fault on statement deallocation
5.4.36-dev
made lsapi_main.c compatible with PHP7/phpng .
Revert "made lsapi_main.c compatible with PHP7/phpng ."

This reverts commit 9fb816f45ad9baa46b91514e70f755eb88539e85.
Not a security-related fix.
update for LiteSpeed
Upgrade crypt_blowfish to version 1.3