summaryrefslogtreecommitdiff
path: root/NEWS
Commit message (Expand)AuthorAgeFilesLines
* 5.4.39php-5.4.39PHP-5.4.39Stanislav Malyshev2015-03-171-1/+1
* Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundaryStanislav Malyshev2015-03-171-0/+4
* Fix bug #69248 - heap overflow vulnerability in regcomp.cStanislav Malyshev2015-03-171-0/+3
* Fixed bug #68976 - Use After Free Vulnerability in unserialize()Stanislav Malyshev2015-03-171-1/+2
* Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration...Stanislav Malyshev2015-03-171-0/+6
* Fix bug #69207 - move_uploaded_file allows nulls in pathStanislav Malyshev2015-03-171-0/+3
* fix typo in bug#Ferenc Kovacs2015-02-181-1/+1
* add CVERemi Collet2015-02-181-1/+1
* 5.4.39 nextStanislav Malyshev2015-02-171-1/+3
* Port for for bug #68552Stanislav Malyshev2015-02-171-0/+6
* - BFNFelipe Pena2015-02-171-1/+7
* Update NEWSYasuo Ohgaki2015-02-141-0/+1
* Update header handling to RFC 7230Stanislav Malyshev2015-02-051-0/+2
* Add mitigation for CVE-2015-0235 (bug #68925)Stanislav Malyshev2015-01-311-0/+4
* formatStanislav Malyshev2015-01-201-1/+2
* add CVEStanislav Malyshev2015-01-201-1/+2
* 5.4.38 nextStanislav Malyshev2015-01-201-1/+3
* Merge branch 'bug68710' into PHP-5.4Stanislav Malyshev2015-01-201-0/+4
|\
| * Fix for bug #68710 (Use After Free Vulnerability in PHP's unserialize())Stanislav Malyshev2015-01-011-0/+4
* | Merge branch 'bug68799' into PHP-5.4Stanislav Malyshev2015-01-201-1/+4
|\ \ | |/
* | Update NEWSDaniel Lowrey2015-01-141-0/+3
* | Fixed bug #68735 fileinfo out-of-bounds memory accessAnatol Belski2015-01-041-0/+7
|/
* FIx bug #68618 (out of bounds read crashes php-cgi)Stanislav Malyshev2014-12-301-0/+2
* add missing NEWS entryFerenc Kovacs2014-12-171-0/+3
* 5.4.37Stanislav Malyshev2014-12-161-1/+3
* add CVEStanislav Malyshev2014-12-161-1/+1
* Fix bug #68594 - Use after free vulnerability in unserialize()Stanislav Malyshev2014-12-161-0/+2
* update NEWSStanislav Malyshev2014-12-111-0/+1
* update newsStanislav Malyshev2014-11-301-0/+3
* update for LiteSpeedStanislav Malyshev2014-11-231-0/+3
* 5.4.36-devStanislav Malyshev2014-11-111-0/+2
* Fixed bug #66584 Segmentation fault on statement deallocationMatteo Beccati2014-11-111-1/+4
* update NEWSFerenc Kovacs2014-11-121-0/+4
* update NEWSStanislav Malyshev2014-11-031-0/+4
* fix NEWS & versionStanislav Malyshev2014-10-221-1/+1
* NEWSRemi Collet2014-10-221-0/+6
* Fix bug #68113 (Heap corruption in exif_thumbnail())Stanislav Malyshev2014-10-131-1/+5
* Fix bug #68089 - do not accept options with embedded \0Stanislav Malyshev2014-10-131-0/+3
* Fixed bug #68044: Integer overflow in unserialize() (32-bits only)Stanislav Malyshev2014-10-131-1/+4
* Fix bug #68027 - fix date parsing in XMLRPC libStanislav Malyshev2014-10-131-1/+4
* update NEWSArd Biesheuvel2014-10-101-0/+3
* update NEWSStanislav Malyshev2014-09-261-1/+4
* Fix NEWSRemi Collet2014-09-151-2/+1
* Fixed #67985 - Incorrect last used array index copied to new array after unsetTjerk Meesters2014-09-091-0/+4
* 5.4.34 is nextStanislav Malyshev2014-09-021-0/+2
* Revert "Fix bug #67644 - Memory corruption & crash during ob_start function c...Stanislav Malyshev2014-09-021-2/+0
* Fix bug #67644 - Memory corruption & crash during ob_start function callbackStanislav Malyshev2014-09-021-0/+2
* update NEWSStanislav Malyshev2014-09-011-0/+2
* fix NEWS for fcgi fix mergeStanislav Malyshev2014-08-281-7/+11
* fix bug #67865Michael Wallner2014-08-211-4/+5