summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristoph M. Becker <cmbecker69@gmx.de>2019-04-30 09:34:53 +0200
committerChristoph M. Becker <cmbecker69@gmx.de>2019-04-30 09:34:53 +0200
commit1210c3b9608fe3d0534d3abc8d5381c5d67048a3 (patch)
treead1214236fef0878f4530876712858c809410911
parentcb5af4e8a0f028237cfd2c99e395cef39f097ca9 (diff)
downloadphp-git-1210c3b9608fe3d0534d3abc8d5381c5d67048a3.tar.gz
Update NEWS wrt. sec fixes
-rw-r--r--NEWS13
1 files changed, 13 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 3a8ba47533..cc605a6c8e 100644
--- a/NEWS
+++ b/NEWS
@@ -31,6 +31,10 @@ PHP NEWS
. Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count
value). (Ignace Nyamagana Butera)
+- EXIF
+ . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
+ (CVE-2019-11036) (Stas)
+
- Interbase:
. Fixed bug #72175 (Impossibility of creating multiple connections to
Interbase with php 7.x). (Nikita)
@@ -43,6 +47,9 @@ PHP NEWS
. LiteSpeed SAPI 7.3.1, better process management, new API function
litespeed_finish_request(). (George Wang)
+- Mail
+ . Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
+
- PCRE:
. Fixed bug #77827 (preg_match does not ignore \r in regex flags). (requinix,
cmb)
@@ -96,6 +103,12 @@ PHP NEWS
. Fixed bug #75113 (Added DatePeriod::getRecurrences() method). (Ignace
Nyamagana Butera)
+- EXIF:
+ . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
+ (Stas)
+ . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
+ (CVE-2019-11035) (Stas)
+
- FPM:
. Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
(Kevin Adler)