summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorRemi Collet <remi@php.net>2014-10-25 11:30:53 +0200
committerRemi Collet <remi@php.net>2014-10-25 11:30:53 +0200
commite75e003ae44bd501e05508128b8a52d364196918 (patch)
treef45e848be2d08e1cd1c6808bfbdd84c90ca66108 /NEWS
parentcefa310cf9adad596e7e0122dd07352fe36affa0 (diff)
downloadphp-git-e75e003ae44bd501e05508128b8a52d364196918.tar.gz
NEWS
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS2
1 files changed, 2 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index b1d56ac0f5..2b68ac1493 100644
--- a/NEWS
+++ b/NEWS
@@ -23,6 +23,8 @@ PHP NEWS
. Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)
. Fixed bug #68224 (buffer-overflow in libmagic/readcdf.c caught by
AddressSanitizer). (Remi)
+ . Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers).
+ (CVE-2014-3710) (Remi)
- FPM:
. Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable