diff options
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 15 |
1 files changed, 14 insertions, 1 deletions
@@ -1,6 +1,6 @@ PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| -02 Oct 2014, PHP 5.5.18RC1 +16 Oct 2014, PHP 5.5.18 - Core: . Fixed bug #67985 (Incorrect last used array index copied to new array after @@ -10,6 +10,15 @@ PHP NEWS . Fixed bug #67633 (A foreach on an array returned from a function not doing copy-on-write). (Nikita) . Fixed bug #51800 (proc_open on Windows hangs forever). (Anatol) + . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). + (CVE-2014-3669) (Stas) + +- cURL: + . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas) + +- EXIF: + . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670) + (Stas) - FPM: . Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable @@ -24,6 +33,10 @@ PHP NEWS - Session: . Fixed bug #67972 (SessionHandler Invalid memory read create_sid()). (Adam) +- XMLRPC: + . Fixed bug #68027 (Global buffer overflow in mkgmtime() function). + (CVE-2014-3668) (Stas) + 18 Sep 2014, PHP 5.5.17 - Core: |