summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLior Kaplan <kaplanlior@gmail.com>2016-04-29 13:11:54 +0300
committerLior Kaplan <kaplanlior@gmail.com>2016-04-29 13:11:54 +0300
commitb8b2dd1a4338abe4c19a9b13af2a4f94ba4e5b63 (patch)
tree1425578c29288f6cd05f4b8a37632717c9093f06
parenta91c3f1dd0ab28707e74ca5f1416a5712e71c0f7 (diff)
downloadphp-git-b8b2dd1a4338abe4c19a9b13af2a4f94ba4e5b63.tar.gz
Add CVE IDs PHP 5.6.20
-rw-r--r--NEWS10
1 files changed, 5 insertions, 5 deletions
diff --git a/NEWS b/NEWS
index f20e0021a8..799ac79547 100644
--- a/NEWS
+++ b/NEWS
@@ -80,17 +80,17 @@ PHP NEWS
- Fileinfo:
. Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic
- file). (Anatol)
+ file). (CVE-2015-8865) (Anatol)
- Mbstring:
. Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in
- mbfl_strcut). (Stas)
+ mbfl_strcut). (CVE-2016-4073) (Stas)
- ODBC:
. Fixed bug #47803, #69526 (Executing prepared statements is succesfull only
for the first two statements). (einavitamar at gmail dot com, Anatol)
. Fixed bug #71860 (Invalid memory write in phar on filename with \0 in
- name). (Stas)
+ name). (CVE-2016-4072) (Stas)
- PDO_DBlib:
. Fixed bug #54648 (PDO::MSSQL forces format of datetime fields).
@@ -103,11 +103,11 @@ PHP NEWS
- SNMP:
. Fixed bug #71704 (php_snmp_error() Format String Vulnerability).
- (andrew at jmpesp dot org)
+ (CVE-2016-4071) (andrew at jmpesp dot org)
- Standard:
. Fixed bug #71798 (Integer Overflow in php_raw_url_encode).
- (taoguangchen at icloud dot com, Stas)
+ (CVE-2016-4070) (taoguangchen at icloud dot com, Stas)
03 Mar 2016, PHP 5.6.19