For January I spent 12.5 hours as follows: * php5: multiple issues - CVE-2016-7125, CVE-2016-9137, CVE-2016-9138: researched and documented non-applicable or already fixed issues - CVE-2016-3141: picked up Raphaël's work in progress and based on his notes integrated/backported an additional patch, verified fix, and ensured unit test passed - CVE-2016-3142, CVE-2016-4342, CVE-2016-9934, CVE-2016-9935, CVE-2016-10158: integrated/backported upstream fixes, verified fixes, and ensured unit tests passed
Regards, -Roberto -- Roberto C. Sánchez