cvs: php-src(PHP_4_4) / NEWS
| From: | Ilia Alshanetsky | Date: | Sun, 25 Mar 2007 15:27:51 +0000 |
| Subject: | cvs: php-src(PHP_4_4) / NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-43637@lists.php.net to get a copy of this message | ||
iliaa Sun Mar 25 15:27:51 2007 UTC
Modified files: (Branch: PHP_4_4)
/php-src NEWS
Log:
Bug fixes
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.1247.2.920.2.213&r2=1.1247.2.920.2.214&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.1247.2.920.2.213 php-src/NEWS:1.1247.2.920.2.214
--- php-src/NEWS:1.1247.2.920.2.213 Sun Mar 18 17:19:30 2007
+++ php-src/NEWS Sun Mar 25 15:27:51 2007
@@ -1,6 +1,8 @@
PHP 4 NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? 2007, Version 4.4.7
+- Fixed CRLF injection inside ftp_putcmd(). (Ilia)
+- Fixed MOPB-32-2007 (Double free inside session_decode()). (Ilia)
- Fixed MOPB-21-2007 An open_basedir/safe_mode bypass inside the
compress.bzip2 wraper. (Ilia)
- Fixed MOPB-22-2007 PHP session_regenerate_id() Double Free Vulnerability.