summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJulien Pauli <jpauli@php.net>2015-06-10 11:05:02 +0200
committerJulien Pauli <jpauli@php.net>2015-06-10 11:05:02 +0200
commitbf72e139010bc308fceb6efbc0ee3b104f1312db (patch)
tree7409962966b41e345b09868913790fe7d229232f
parent4bf3f646eea270d93ef6b9ebcf285c77a70a733b (diff)
downloadphp-git-bf72e139010bc308fceb6efbc0ee3b104f1312db.tar.gz
Updated NEWS
-rw-r--r--NEWS10
1 files changed, 10 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index e0023285f3..64efb55121 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,9 @@ PHP NEWS
(Julien)
. Fixed bug #69628 (complex GLOB_BRACE fails on Windows).
(Christoph M. Becker)
+ . Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
+ (Anatol Belski)
+ . Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
- FTP:
. Improved fix for bug #69545 (Integer overflow in ftp_genlist()
@@ -20,6 +23,13 @@ PHP NEWS
- Iconv:
. Fixed bug #48147 (iconv with //IGNORE cuts the string). (Stas)
+- Litespeed SAPI:
+ . Fixed bug #68812 (Unchecked return value). (George Wang)
+
+- Mail:
+ . Fixed bug #68776 (mail() does not have mail header injection prevention for
+ additional headers). (Yasuo)
+
- MCrypt:
. Added file descriptor caching to mcrypt_create_iv() (Leigh)