diff options
| author | Stanislav Malyshev <stas@php.net> | 2015-01-20 11:58:04 -0800 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2015-01-20 11:59:35 -0800 |
| commit | b2a254fe2d02ca4c3706223c962c55df2dc3adec (patch) | |
| tree | 8c260b4a81cabb2207fa04dba3472e235798b055 | |
| parent | c9162147f23426dbe0a35c755cadd172aab5dae1 (diff) | |
| parent | 53b3db43caa658a1dff12e79182d80b0d2db85e6 (diff) | |
| download | php-git-b2a254fe2d02ca4c3706223c962c55df2dc3adec.tar.gz | |
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
update NEWS
format
add CVE
| -rw-r--r-- | NEWS | 15 |
1 files changed, 10 insertions, 5 deletions
@@ -6,7 +6,7 @@ . Fixed bug #68711 (useless comparisons). (bugreports at internot dot info) - Sqlite3: - . Fix bug #68260 (SQLite3Result::fetchArray declares wrong + . Fixed bug #68260 (SQLite3Result::fetchArray declares wrong required_num_args). (Julien) - PDO_mysql: @@ -35,12 +35,13 @@ . Fixed bug #65576 (Constructor from trait conflicts with inherited constructor). (dunglas at gmail dot com) . Fixed bug #68676 (Explicit Double Free). (Kalle) + . Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()). + (CVE-2015-0231) (Stefan Esser) - CGI: - . Fix bug #68618 (out of bounds read crashes php-cgi). (Stas) - -- CLI server: - . Fix bug #68745 (Invalid HTTP requests make web server segfault). (Adam) + . Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427) + (Stas) + . Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam) - cURL: . Fixed bug #67643 (curl_multi_getcontent returns '' when @@ -50,6 +51,10 @@ . Implemented FR #68268 (DatePeriod: Getter for start date, end date and interval). (Marc Bennewitz) +- EXIF: + . Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232) + (Stas) + - Fileinfo: . Fixed bug #68398 (msooxml matches too many archives). (Anatol) . Fixed bug #68665 (invalid free in libmagic). (Joshua Rogers, Anatol Belski) |