cvs: php-src(PHP_4_4) / NEWS
| From: | Ilia Alshanetsky | Date: | Wed, 14 Mar 2007 14:49:29 +0000 |
| Subject: | cvs: php-src(PHP_4_4) / NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-43534@lists.php.net to get a copy of this message | ||
iliaa Wed Mar 14 14:49:29 2007 UTC
Modified files: (Branch: PHP_4_4)
/php-src NEWS
Log:
Bug fixing news
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.1247.2.920.2.205&r2=1.1247.2.920.2.206&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.1247.2.920.2.205 php-src/NEWS:1.1247.2.920.2.206
--- php-src/NEWS:1.1247.2.920.2.205 Sat Mar 10 13:07:44 2007
+++ php-src/NEWS Wed Mar 14 14:49:28 2007
@@ -1,6 +1,8 @@
PHP 4 NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? 2007, Version 4.4.7
+- Fixed MOPB-21-2007 An open_basedir/safe_mode bypass inside the
+ compress.bzip2 wraper. (Ilia)
- Fixed CVE-2007-1001, GD wbmp used with invalid image size (Pierre)
- Fixed CVE-2007-0455 (Kees Cook, Pierre)
- Fixed bug #40747 (possible crash in session when save_path is out of