summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2020-03-15 19:35:01 -0700
committerStanislav Malyshev <stas@php.net>2020-03-16 22:40:48 -0700
commitfc39bb9da93b30e846fe7662c15d69d31cf31462 (patch)
tree0e06fb68baeb85d6230ccb130a76d4e2e84dd619
parent1599f440a5d169a31b2ff3f5bd1ffc9172b43641 (diff)
downloadphp-git-fc39bb9da93b30e846fe7662c15d69d31cf31462.tar.gz
[ci skip] Update NEWS
-rw-r--r--NEWS14
1 files changed, 14 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index f984953e0d..419bc04723 100644
--- a/NEWS
+++ b/NEWS
@@ -5,11 +5,25 @@ PHP NEWS
- Core:
. Fixed bug #79364 (When copy empty array, next key is unspecified). (cmb)
+ . Fixed bug #79329 (get_headers() silently truncates after a null byte)
+ (CVE-2020-7066) (cmb)
. Fixed bug #78210 (Invalid pointer address). (cmb, Nikita)
- CURL:
. Fixed bug #79199 (curl_copy_handle() memory leak). (cmb)
+- EXIF:
+ . Fixed bug #79282 (Use-of-uninitialized-value in exif) (CVE-2020-7064)
+ (Nikita)
+
+- Fileinfo:
+ . Fixed bug #79283 (Segfault in libmagic patch contains a buffer
+ overflow) (cmb)
+
+- MBstring:
+ . Fixed bug #79371 (mb_strtolower (UTF-32LE): stack-buffer-overflow at
+ php_unicode_tolower_full) (CVE-2020-7065) (cmb)
+
- SimpleXML:
. Fixed bug #61597 (SXE properties may lack attributes and content). (cmb)