summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLior Kaplan <kaplanlior@gmail.com>2015-05-22 10:58:28 +0300
committerLior Kaplan <kaplanlior@gmail.com>2015-05-22 10:58:28 +0300
commitc9ac441fe883ef1980d5374c3ef09eb1048a532a (patch)
treecff6966e71cee4cc85ced818189410bdc3b57d37
parenta7de68f98ac563b57156c31c3b89653444af68ef (diff)
downloadphp-git-c9ac441fe883ef1980d5374c3ef09eb1048a532a.tar.gz
Add CVE for bugs in 5.5.25
-rw-r--r--NEWS15
1 files changed, 9 insertions, 6 deletions
diff --git a/NEWS b/NEWS
index 2cae7404e9..0ccc88c8ac 100644
--- a/NEWS
+++ b/NEWS
@@ -30,10 +30,12 @@ PHP NEWS
14 May 2015, PHP 5.5.25
- Core:
- . Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (Stas)
+ . Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability).
+ (CVE-2015-4024) (Stas)
. Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
(Stas)
- . Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (Stas)
+ . Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
+ (Stas)
. Fixed bug #69522 (heap buffer overflow in unpack()). (Stas)
. Fixed bug #69467 (Wrong checked for the interface by using Trait).
(Laruence)
@@ -50,7 +52,7 @@ PHP NEWS
- FTP:
. Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap
- overflow). (Stas)
+ overflow). (CVE-2015-4022) (Stas)
- ODBC:
. Fixed bug #69474 (ODBC: Query with same field name from two tables returns
@@ -63,11 +65,12 @@ PHP NEWS
(Daniel Lowrey)
- PCNTL:
- . Fixed bug #68598 (pcntl_exec() should not allow null char). (Stas)
+ . Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
+ (Stas)
- Phar:
- . Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename
- starts with null). (Stas)
+ . Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry
+ filename starts with null). (CVE-2015-4021) (Stas)
16 Apr 2015, PHP 5.5.24