summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLior Kaplan <kaplanlior@gmail.com>2016-04-29 13:41:29 +0300
committerLior Kaplan <kaplanlior@gmail.com>2016-04-29 13:41:29 +0300
commit9943c322426ed59ca098ee9a57fc87c42052af56 (patch)
tree08d7731c091cbd088c97e25d329cb5420e593541
parent5a578eb8f0102d6b7e66fee988348dc1e77ee2cd (diff)
downloadphp-git-9943c322426ed59ca098ee9a57fc87c42052af56.tar.gz
Add CVE IDs PHP 7.0.0
-rw-r--r--NEWS5
1 files changed, 3 insertions, 2 deletions
diff --git a/NEWS b/NEWS
index 1fc917be72..1df7cecc19 100644
--- a/NEWS
+++ b/NEWS
@@ -1044,7 +1044,7 @@ PHP NEWS
. Implemented FR #70438 (Add IV parameter for openssl_seal and openssl_open)
(Jakub Zelenka)
. Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically
- secure). (Stas)
+ secure). (CVE-2015-8867) (Stas)
. Fixed bug #69882 (OpenSSL error "key values mismatch" after
openssl_pkcs12_read with extra cert). (Tomasz Sawicki)
. Added "alpn_protocols" SSL context option allowing encrypted client/server
@@ -1292,7 +1292,8 @@ PHP NEWS
(Daniel Lowrey & Bob Weinand)
- Zip:
- . Fixed bug #70322 (ZipArchive::close() doesn't indicate errors). (cmb)
+ . Fixed bug #70322 (ZipArchive::close() doesn't indicate errors).
+ (CVE-2014-9767) (cmb)
. Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when
creating directories). (neal at fb dot com)
. Added ZipArchive::setCompressionName and ZipArchive::setCompressionIndex