diff options
| author | Stanislav Malyshev <stas@php.net> | 2019-12-16 23:41:04 -0800 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2019-12-16 23:41:04 -0800 |
| commit | 9705e631a426f500494c14cd011adb24cd2679ba (patch) | |
| tree | d141d4f150dbfc80511c7cad55094a74b0c8a026 | |
| parent | 6d5cddabafaba158ed4c362054be7f097859a392 (diff) | |
| download | php-git-9705e631a426f500494c14cd011adb24cd2679ba.tar.gz | |
[ci skip] Update NEWS
| -rw-r--r-- | NEWS | 16 |
1 files changed, 16 insertions, 0 deletions
@@ -5,6 +5,22 @@ PHP NEWS 19 Dec 2019, PHP 7.2.26 +- Bcmath: + . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046). + (cmb) + +- Core: + . Fixed bug #78862 (link() silently truncates after a null byte on Windows). + (CVE-2019-11044). (cmb) + . Fixed bug #78863 (DirectoryIterator class silently truncates after a null + byte). (CVE-2019-11045). (cmb) + +- EXIF: + . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer). + (CVE-2019-11050). (Nikita) + . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047). + (Nikita) + - GD: . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb) |