diff options
| author | Stanislav Malyshev <stas@php.net> | 2015-09-01 12:04:04 -0700 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2015-09-01 12:04:04 -0700 |
| commit | 32fe02c27da068af74025a12166e6c466311222e (patch) | |
| tree | dc77fdea3d3ca87b8193b5c07dee2e55204171ca | |
| parent | 53d274beb0fc5716ccc41236ae6eb30c54d5eda5 (diff) | |
| parent | 31b634bf7cb8e3de1dfa71418e348133c2365933 (diff) | |
| download | php-git-32fe02c27da068af74025a12166e6c466311222e.tar.gz | |
Merge branch 'PHP-5.5' into PHP-5.5.29
* PHP-5.5:
update NEWS
add NEWS for fixes
| -rw-r--r-- | NEWS | 46 |
1 files changed, 42 insertions, 4 deletions
@@ -1,9 +1,45 @@ PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| -?? ??? 2015, PHP 5.5.29 +?? ??? 2015, PHP 5.5.30 ** PHP 5.5 is in security-only mode , please do not commit to this branch ** +03 Sep 2015, PHP 5.5.29 + +- Core: + . Fixed bug #70172 (Use After Free Vulnerability in unserialize()). (Stas) + . Fixed bug #70219 (Use after free vulnerability in session deserializer). + (taoguangchen at icloud dot com) + +- EXIF: + . Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte + value of 32 bytes). (Stas) + +- hash: + . Fixed bug #70312 (HAVAL gives wrong hashes in specific cases). (letsgolee + at naver dot com) + +- PCRE: + . Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions). + (Anatol Belski) + +- SOAP: + . Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE). + (Stas) + +- SPL: + . Fixed bug #70365 (Use-after-free vulnerability in unserialize() with + SplObjectStorage). (taoguangchen at icloud dot com) + . Fixed bug #70366 (Use-after-free vulnerability in unserialize() with + SplDoublyLinkedList). (taoguangchen at icloud dot com) + +- XSLT: + . Fixed bug #69782 (NULL pointer dereference). (Stas) + +- ZIP: + . Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when + creating directories). (neal at fb dot com) + 06 Aug 2015, PHP 5.5.28 - Core: @@ -80,9 +116,10 @@ PHP NEWS (Matteo) - Phar: - . Fixed bug #69958 (Segfault in Phar::convertToData on invalid file). (Stas) + . Fixed bug #69958 (Segfault in Phar::convertToData on invalid file). + (CVE-2015-5589) (Stas) . Fixed bug #69923 (Buffer overflow and stack smashing error in - phar_fix_filepath). (Stas) + phar_fix_filepath). (CVE-2015-5590) (Stas) - SimpleXML: . Refactored the fix for bug #66084 (simplexml_load_string() mangles empty @@ -354,7 +391,8 @@ PHP NEWS - SOAP: . Fixed bug #69085 (SoapClient's __call() type confusion through - unserialize()). (andrea dot palazzo at truel dot it, Laruence) + unserialize()). (CVE-2015-4147, CVE-2015-4148) + (andrea dot palazzo at truel dot it, Laruence) - SPL: . Fixed bug #69108 ("Segmentation fault" when (de)serializing |