summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFerenc Kovacs <tyrael@php.net>2014-10-15 14:03:11 +0200
committerFerenc Kovacs <tyrael@php.net>2014-10-15 14:03:11 +0200
commit9a5184840906c9819e5bc93ca560f8337d66b97f (patch)
tree1a850221a80ff26aea1f31c5593905214a7b0234
parenta2cda214d668b13db8242216551ab94a58e66b97 (diff)
downloadphp-git-9a5184840906c9819e5bc93ca560f8337d66b97f.tar.gz
update NEWS
-rw-r--r--NEWS16
1 files changed, 16 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 8755e5e61a..8327cb7c3b 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,21 @@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
+16 Oct 2014, PHP 5.6.2
+
+- Core:
+ . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)).
+ (CVE-2014-3669) (Stas)
+
+- cURL:
+ . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas)
+
+- EXIF:
+ . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
+ (Stas)
+
+- XMLRPC:
+ . Fixed bug #68027 (Global buffer overflow in mkgmtime() function).
+ (CVE-2014-3668) (Stas)
02 Oct 2014, PHP 5.6.1