cvs: php-src(PHP_5_2) / NEWS
| From: | Pierre-Alain Joye | Date: | Wed, 14 Mar 2007 16:36:16 +0000 |
| Subject: | cvs: php-src(PHP_5_2) / NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-43541@lists.php.net to get a copy of this message | ||
pajoye Wed Mar 14 16:36:16 2007 UTC
Modified files: (Branch: PHP_5_2)
/php-src NEWS
Log:
- leak in extract
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.591&r2=1.2027.2.547.2.592&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.2027.2.547.2.591 php-src/NEWS:1.2027.2.547.2.592
--- php-src/NEWS:1.2027.2.547.2.591 Wed Mar 14 15:10:37 2007
+++ php-src/NEWS Wed Mar 14 16:36:16 2007
@@ -16,6 +16,7 @@
- Added tidyNode::getParent() method (John, Nuno)
- Added openbasedir and safemode checks in zip:// stream wrapper and
ZipArchive::open (Pierre)
+- Fixed possible leak in ZipArchive::extractTo when safemode checks fails (Ilia)
- Fixed possible relative path issues in zip_open and TS mode (old API) (Pierre)
- Fixed zend_llist_remove_tail (Michael Wallner, Dmitry)
- Fixed a thread safety issue in gd gif read code (Nuno, Roman Nemecek)