summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFerenc Kovacs <tyrael@php.net>2014-12-17 02:03:58 +0100
committerFerenc Kovacs <tyrael@php.net>2014-12-17 02:19:35 +0100
commitfe1ab0e566dccf794483d0dfab7f06e6c095b1a2 (patch)
tree8d84dd8135850b48847df5bd47f096d50f44249e
parent4f8fd1fdf603607bbe19ed95b1e2066a77cc7ff5 (diff)
downloadphp-git-fe1ab0e566dccf794483d0dfab7f06e6c095b1a2.tar.gz
fix NEWS
-rw-r--r--NEWS10
1 files changed, 6 insertions, 4 deletions
diff --git a/NEWS b/NEWS
index 13fab4302c..07c99fa1b5 100644
--- a/NEWS
+++ b/NEWS
@@ -14,9 +14,11 @@ PHP NEWS
. Fixed bug #68370 ("unset($this)" can make the program crash). (Laruence)
. Fixed bug #68422 (Incorrect argument reflection info for array_multisort()).
(Alexander Lisachenko)
+ . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
. Fixed bug #68446 (Array constant not accepted for array parameter default).
(Bob, Dmitry)
- . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
+ . Fixed bug #68594 (Use after free vulnerability in unserialize()).
+ (CVE-2014-8142) (Stefan Esser)
- Date:
. Fixed day_of_week function as it could sometimes return negative values
@@ -39,12 +41,12 @@ PHP NEWS
(Florian Margaine, Remi)
. Fixed bug #68478 (access.log don't use prefix). (Remi)
-- GMP:
- . Fixed bug #68419 (build error with gmp 4.1). (Remi)
-
- Mcrypt:
. Fixed possible read after end of buffer and use after free. (Dmitry)
+- GMP:
+ . Fixed bug #68419 (build error with gmp 4.1). (Remi)
+
- PDO_pgsql:
. Fixed bug #67462 (PDO_PGSQL::beginTransaction() wrongly throws exception
when not in transaction) (Matteo)