summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoe Watkins <krakjoe@php.net>2017-01-17 19:31:07 +0000
committerJoe Watkins <krakjoe@php.net>2017-01-17 19:32:46 +0000
commit84aa9d5e9a325db5fa49b06e49f6e71cf483d661 (patch)
tree1caebd1f677e858d7ddd967c763b0ede576a8979
parentefe6d8a49de098c3b80b0579d7a2f537c49a360b (diff)
downloadphp-git-84aa9d5e9a325db5fa49b06e49f6e71cf483d661.tar.gz
missing news entries
-rw-r--r--NEWS17
1 files changed, 17 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 3002608ddf..2fb1b53c2a 100644
--- a/NEWS
+++ b/NEWS
@@ -13,6 +13,11 @@ PHP NEWS
. Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
. Fixed bug #73783 (SIG_IGN doesn't work when Zend Signals is enabled).
(David Walker)
+ . Fixed bug #73825 (Heap out of bounds read on unserialize in
+ finish_nested_data()). (Stas)
+ . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
+ (Stas)
+ . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)
- CLI:
. Fixed bug #72555 (CLI output(japanese) on Windows). (Anatol)
@@ -24,6 +29,13 @@ PHP NEWS
- DOM:
. Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)
+- EXIF:
+ . Bug bug #73737 (FPE when parsing a tag format). (Stas)
+
+- GD:
+ . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
+ . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)
+
- Mbstring:
. Fixed bug #73646 (mb_ereg_search_init null pointer dereference).
(Laruence)
@@ -52,6 +64,11 @@ PHP NEWS
. Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
statement). (Dorin Marcoci)
+- Phar:
+ . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
+ . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
+ . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)
+
- phpdbg:
. Fixed bug #73794 (Crash (out of memory) when using run and # command
separator). (Bob)