summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristoph M. Becker <cmbecker69@gmx.de>2019-04-30 10:00:07 +0200
committerChristoph M. Becker <cmbecker69@gmx.de>2019-04-30 10:00:07 +0200
commit71056c28175fae03e522426ec9ad9af097d9bcf0 (patch)
tree3feb2fe1dd59f09e8042190302921ab20299409f
parent6484774161f30571fc1b3a67b3c06f2d43f16ca8 (diff)
downloadphp-git-71056c28175fae03e522426ec9ad9af097d9bcf0.tar.gz
Update NEWS
-rw-r--r--NEWS15
1 files changed, 12 insertions, 3 deletions
diff --git a/NEWS b/NEWS
index 84037fdfd3..9ffc9b4680 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,6 @@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-18 Apr 2019, PHP 7.3.5RC1
+02 May 2019, PHP 7.3.5
- Core:
. Fixed bug #77903 (ArrayIterator stops iterating after offsetSet call).
@@ -10,6 +10,10 @@ PHP NEWS
. Fixed bug #77794 (Incorrect Date header format in built-in server).
(kelunik)
+- EXIF
+ . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
+ (CVE-2019-11036) (Stas)
+
- Interbase:
. Fixed bug #72175 (Impossibility of creating multiple connections to
Interbase with php 7.x). (Nikita)
@@ -25,6 +29,9 @@ PHP NEWS
- LDAP:
. Fixed bug #77869 (Core dump when using server controls) (mcmic)
+- Mail
+ . Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
+
- mbstring:
. Implemented FR #72777 (Implement regex stack limits for mbregex functions).
(Yasuo Ohgaki, Stas)
@@ -86,8 +93,10 @@ PHP NEWS
. Fixed bug #77578 (Crash when php unload). (cmb)
- EXIF:
- . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (Stas)
- . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (Stas)
+ . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
+ (Stas)
+ . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
+ (CVE-2019-11035) (Stas)
- FPM:
. Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).