summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJulien Pauli <jpauli@php.net>2015-05-13 12:53:00 +0200
committerJulien Pauli <jpauli@php.net>2015-05-13 12:53:00 +0200
commitd8bf5110d5191f31a9c475d359e9c2ac79e84e96 (patch)
tree4f4aea5f2dcba0d4f67a3ec80dfe89b641e857ca
parent2c1e49075ba48d93439a9e79eae43d9f8469b832 (diff)
downloadphp-git-d8bf5110d5191f31a9c475d359e9c2ac79e84e96.tar.gz
Updated NEWS to reflect cherry picks from 5.4
-rw-r--r--NEWS16
1 files changed, 16 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 91c4ed099c..e9d07262b3 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,11 @@ PHP NEWS
14 May 2015, PHP 5.5.25
- Core:
+ . Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (Stas)
+ . Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
+ (Stas)
+ . Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (Stas)
+ . Fixed bug #69522 (heap buffer overflow in unpack()). (Stas)
. Fixed bug #69467 (Wrong checked for the interface by using Trait).
(Laruence)
. Fixed bug #69420 (Invalid read in zend_std_get_method). (Laruence)
@@ -16,6 +21,10 @@ PHP NEWS
. Fixed bug #69472 (php_sys_readlink ignores misc errors from
GetFinalPathNameByHandleA). (Jan Starke)
+- FTP:
+ . Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap
+ overflow). (Stas)
+
- ODBC:
. Fixed bug #69474 (ODBC: Query with same field name from two tables returns
incorrect result). (Anatol)
@@ -26,6 +35,13 @@ PHP NEWS
. Fixed bug #69402 (Reading empty SSL stream hangs until timeout).
(Daniel Lowrey)
+- PCNTL:
+ . Fixed bug #68598 (pcntl_exec() should not allow null char). (Stas)
+
+- Phar:
+ . Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename
+ starts with null). (Stas)
+
16 Apr 2015, PHP 5.5.24
- Apache2handler: