summaryrefslogtreecommitdiff
path: root/NEWS
Commit message (Collapse)AuthorAgeFilesLines
* Prepare PHP 7.3.8php-7.3.8PHP-7.3.8Christoph M. Becker2019-07-301-21/+15
|
* Fix #78338: Array cross-border reading in PCREChristoph M. Becker2019-07-301-0/+3
| | | | | | We backport r1092 from pcre2. (cherry picked from commit 8947fd9e9fdce87cd6c59817b1db58e789538fe9)
* Fix #77919: Potential UAF in Phar RSHUTDOWNChristoph M. Becker2019-07-301-0/+3
| | | | | | | | | We have to properly clean up in case phar_flush() is failing. We also make the expectation of the respective test case less liberal to avoid missing such bugs in the future. (cherry picked from commit cd1101e8c87aa175c2d5e87ddec656e50ef4ab5d)
* Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)Stanislav Malyshev2019-07-301-0/+2
| | | | (cherry picked from commit aeb6d13185a2ea4f1496ede2697469faed98ce05)
* Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)Stanislav Malyshev2019-07-301-0/+4
| | | | (cherry picked from commit dea2989ab8ba87a6180af497b2efaf0527e985c5)
* Fixed bug #78341Nikita Popov2019-07-291-0/+3
| | | | | | | | The smart branch logic assumed b->start refers to the old offsets, while b->start was already adjusted to the new offsets at this point. Delay the change until later. (cherry picked from commit 8e63bb5e465620f27de93dea82e0d84be72da7f3)
* Fixed bug #78297Nikita Popov2019-07-161-0/+5
| | | | (cherry picked from commit 8a19fe29de77d7477d59db472dd6aadabd5ac249)
* Prepare PHP 7.3.8RC1php-7.3.8RC1Christoph M. Becker2019-07-161-1/+1
|
* Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-151-0/+3
|\
| * Fix bug #77124Nikita Popov2019-07-151-0/+3
| | | | | | | | | | This is a backport of 6fcae63f614d1ed4aaeaff7b13a7a4627b1f1312 to PHP 7.2.
| * Fix #78269 password_hash uses weak options for argon2Remi Collet2019-07-151-0/+1
| |
* | typo [ci skip]Remi Collet2019-07-151-1/+1
| |
* | Fix #78269 password_hash uses weak options for argon2Remi Collet2019-07-151-0/+1
| |
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-151-2/+4
|\ \ | |/
| * Fix bug #78291 Missing opcache directivesAndrew Collington2019-07-151-7/+11
| | | | | | | | | | | | | | | | | | New opcache directives have been added recently which are returned if using `ini_get_all('zend opcache')` but are not listed in the directives if using `opcache_get_configuration()`. This fix adds those missing directives as well as if `opcache.mmap_base` is used instead of `opcache.lockfile_path`. Also adds a test to ensure the directives match with both methods of fetching.
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-121-0/+4
|\ \ | |/
| * Fixed bug #78279Nikita Popov2019-07-121-0/+4
| | | | | | | | | | Even if we don't initialize the callback on every request, we should still reset our globals to default values...
* | Fix #78212: Segfault in built-in webserverChristoph M. Becker2019-07-111-0/+1
| | | | | | | | | | | | | | | | Since syslog's ident and facility parameters have been added to config[1], vsyslog() segfaults on Windows, if openlog() has not been called before. We bring back the removed lines to fix this. [1] <http://git.php.net/?p=php-src.git;a=commit;h=2475337bd8a0fad0dac03db3f5e7e9d331d53653>
* | Fix bug #78271Nikita Popov2019-07-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | When cleaning nops in the dfa pass, we were always keeping the smart branch inhibiting nop that occurs directly before the jump instruction. However, as we skip unreachable blocks entirely, it may happen that we need to keep a nop that occurs further back, prior to the unreachable blocks. Account for that case now. We should really do something about the smart branch situation, this is very fragile...
* | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-07-091-0/+3
|\ \ | |/ | | | | | | * PHP-7.2: Upgrade to SQLite 3.28.0
| * Merge branch 'PHP-7.1' into PHP-7.2Christoph M. Becker2019-07-091-0/+3
| |\ | | | | | | | | | | | | * PHP-7.1: Upgrade to SQLite 3.28.0
| | * Upgrade to SQLite 3.28.0Christoph M. Becker2019-07-091-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | Over the years, multiple security vulnerabilities[1] have been found and fixed in SQLite3, so it makes sense to update our bundled libsqlite to the latest available version. [1] <https://www.cvedetails.com/vulnerability-list/vendor_id-9237/Sqlite.html>
| | * bump version after releaseJoe Watkins2019-05-281-1/+5
| | |
| | * Fix bug #77967 - Bypassing open_basedir restrictions via file urisStanislav Malyshev2019-05-271-3/+6
| | |
| | * Fix bug #77988 - heap-buffer-overflow on php_jpg_get16Stanislav Malyshev2019-05-271-2/+6
| | |
| | * Update NEWSStanislav Malyshev2019-05-271-3/+13
| | |
| | * Fix bug #77950 - Heap-buffer-overflow in _estrndup via exif_process_IFD_TAGStanislav Malyshev2019-04-301-2/+9
| | | | | | | | | | | | | | | | | | I do not completely understand what is going on there, but I am pretty sure dir_entry <= offset_base if not a normal situation, so we better not to rely on such dir_entry.
| | * bump versions after releaseJoe Watkins2019-04-021-1/+5
| | |
| | * Fixed bug #77831 - Heap-buffer-overflow in exif_iif_add_value in EXIFStanislav Malyshev2019-04-021-0/+1
| | |
| | * Update NEWSStanislav Malyshev2019-03-311-0/+3
| | |
| | * SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy ↵bohwaz2019-03-111-1/+2
| | | | | | | | | | | | against potential security flaws
| | * fix newsJoe Watkins2019-03-051-2/+2
| | |
| | * bump versions after releaseJoe Watkins2019-03-051-1/+5
| | |
| | * Fix bug #77586 - phar_tar_writeheaders_int() buffer overflowStanislav Malyshev2019-03-031-5/+6
| | |
| | * Update NEWSStanislav Malyshev2019-03-031-0/+16
| | |
| * | Update NEWS [ci skip]Peter Kokot2019-07-081-3/+10
| | |
* | | Update NEWS [ci skip]Peter Kokot2019-07-081-0/+7
| | |
* | | [ci skip] Remove NEWS entryChristoph M. Becker2019-07-041-1/+0
| | | | | | | | | | | | | | | This commit already was contained in PHP 7.3.7, but doesn't need a NEWS entry, since the regression had only been introduced with PHP 7.3.7RC1.
* | | Fix typo in NEWS [skip ci]Fabien Villepinte2019-07-041-1/+1
| | |
* | | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-031-0/+4
|\ \ \ | |/ /
| * | Fixed bug #78231Nikita Popov2019-07-031-0/+4
| | |
* | | Fixed bug #78230Nikita Popov2019-07-031-3/+5
| | |
* | | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-07-031-0/+3
|\ \ \ | |/ / | | | | | | | | | * PHP-7.2: Fix #78241: touch() does not handle dates after 2038 in PHP 64-bit
| * | Fix #78241: touch() does not handle dates after 2038 in PHP 64-bitChristoph M. Becker2019-07-031-0/+3
| | | | | | | | | | | | | | | | | | `time_t` defaults to `_time64` (which is 64bit signed) even on x86, but `Int32x32To64()` truncates it to signed 32bit. We replace the macro with the "manual" calculation.
| * | Update NEWS [ci skip]Anatol Belski2019-06-291-0/+4
| | |
* | | Fix NEWSChristoph M. Becker2019-07-021-1/+0
| | | | | | | | | | | | | | | Bug #78185 fixed a regression in PHP 7.3.7RC2, so should not be listed here.
* | | Update NEWS [ci skip]Peter Kokot2019-07-011-0/+5
| | |
* | | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-06-281-0/+4
|\ \ \ | |/ / | | | | | | | | | * PHP-7.2: Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
| * | Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changedVincent2019-06-281-0/+4
| | | | | | | | | | | | Reset stmt->columns when column count changed on new execution of prepared statement
* | | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-06-251-0/+1
|\ \ \ | |/ / | | | | | | | | | * PHP-7.2: Fix #78202: Opcache stats for cache hits are capped at 32bit NUM
View Lorry Controller Status