summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2019-05-27 16:48:32 -0700
committerStanislav Malyshev <stas@php.net>2019-05-27 16:48:32 -0700
commit16e037bd46359a31f218ee220ff09f1c3270e489 (patch)
tree2cf0a48283d432458631dfd612599badb845bbf2
parent7cf7148a8f8f4f55fb04de2a517d740bb6253eac (diff)
downloadphp-git-16e037bd46359a31f218ee220ff09f1c3270e489.tar.gz
Update NEWS
-rw-r--r--NEWS16
1 files changed, 13 insertions, 3 deletions
diff --git a/NEWS b/NEWS
index 70ad9a7a6f..ea27c53d56 100644
--- a/NEWS
+++ b/NEWS
@@ -1,13 +1,23 @@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? 2019, PHP 7.1.29
+?? ??? 2019, PHP 7.1.30
+
+- GD:
+ . Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm).
+ (CVE-2019-11038) (cmb)
+
+- Iconv:
+ . Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
+ due to integer overflow). (CVE-2019-11039). (maris dot adam)
+
+03 May 2019, PHP 7.1.29
- EXIF
-. Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
+ . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
(CVE-2019-11036) (Stas)
- Mail
-. Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
+ . Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
04 Apr 2019, PHP 7.1.28