summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLior Kaplan <kaplanlior@gmail.com>2015-06-18 15:45:10 +0300
committerLior Kaplan <kaplanlior@gmail.com>2015-06-18 15:45:10 +0300
commit5f67caad54c95c6de322ff9ec6af8143085aa6dc (patch)
tree901a820d604756a367eb47e1bb31b3e594453268
parent7f4e1a0eefdd4fb0addf9ff95eef3ccba92a9d87 (diff)
downloadphp-git-5f67caad54c95c6de322ff9ec6af8143085aa6dc.tar.gz
Add CVE to bugs #69545, #69646 and #69667
-rw-r--r--NEWS6
1 files changed, 3 insertions, 3 deletions
diff --git a/NEWS b/NEWS
index da342689c9..7f1bf5d732 100644
--- a/NEWS
+++ b/NEWS
@@ -6,9 +6,9 @@ PHP NEWS
- Core:
. Imroved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in
- heap overflow). (Max Spelsberg)
+ heap overflow). (CVE-2015-4643) (Max Spelsberg)
. Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
- (Anatol Belski)
+ (CVE-2015-4642) (Anatol Belski)
. Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
- Litespeed SAPI:
@@ -19,7 +19,7 @@ PHP NEWS
additional headers). (Yasuo)
- Postgres:
- . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)
+ . Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644) (Remi)
- Sqlite3:
. Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,