summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLior Kaplan <kaplanlior@gmail.com>2016-04-29 13:21:35 +0300
committerLior Kaplan <kaplanlior@gmail.com>2016-04-29 13:21:35 +0300
commiteeea33db686941a3ec045137bf66630c5cb9ec12 (patch)
treed04d81f934d843217d20789d46c7db3e9ec8ebf5
parent26f8ee48d6476b884bc63186051929cb1af28c78 (diff)
downloadphp-git-eeea33db686941a3ec045137bf66630c5cb9ec12.tar.gz
Add CVE IDs PHP 5.6.12
-rw-r--r--NEWS12
1 files changed, 6 insertions, 6 deletions
diff --git a/NEWS b/NEWS
index 53a43faabc..2df96279fe 100644
--- a/NEWS
+++ b/NEWS
@@ -471,12 +471,12 @@ PHP NEWS
. Fixed bug #69882 (OpenSSL error "key values mismatch" after
openssl_pkcs12_read with extra cert). (Tomasz Sawicki)
. Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically
- secure). (Stas)
+ secure). (CVE-2015-8867) (Stas)
- Phar:
. Improved fix for bug #69441. (Anatol Belski)
. Fixed bug #70019 (Files extracted from archive may be placed outside of
- destination directory). (Anatol Belski)
+ destination directory). (CVE-2015-6833) (Anatol Belski)
- SOAP:
. Fixed bug #70081 (SoapClient info leak / null pointer dereference via
@@ -484,13 +484,13 @@ PHP NEWS
- SPL:
. Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject
- items). (sean.heelan)
+ items). (CVE-2015-6832) (sean.heelan)
. Fixed bug #70166 (Use After Free Vulnerability in unserialize() with
- SPLArrayObject). (taoguangchen at icloud dot com)
+ SPLArrayObject). (CVE-2015-6831) (taoguangchen at icloud dot com)
. Fixed bug #70168 (Use After Free Vulnerability in unserialize() with
- SplObjectStorage). (taoguangchen at icloud dot com)
+ SplObjectStorage). (CVE-2015-6831) (taoguangchen at icloud dot com)
. Fixed bug #70169 (Use After Free Vulnerability in unserialize() with
- SplDoublyLinkedList). (taoguangchen at icloud dot com)
+ SplDoublyLinkedList). (CVE-2015-6831) (taoguangchen at icloud dot com)
- Standard:
. Fixed bug #70096 (Repeated iptcembed() adds superfluous FF bytes). (cmb)