cvs: php-src(PHP_5_2) / NEWS
| From: | Stanislav Malyshev | Date: | Wed, 19 Sep 2007 00:41:11 +0000 |
| Subject: | cvs: php-src(PHP_5_2) / NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-46222@lists.php.net to get a copy of this message | ||
stas Wed Sep 19 00:41:11 2007 UTC
Modified files: (Branch: PHP_5_2)
/php-src NEWS
Log:
report iconv fix
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.955&r2=1.2027.2.547.2.956&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.2027.2.547.2.955 php-src/NEWS:1.2027.2.547.2.956
--- php-src/NEWS:1.2027.2.547.2.955 Tue Sep 18 20:25:07 2007
+++ php-src/NEWS Wed Sep 19 00:41:10 2007
@@ -12,6 +12,8 @@
- Fixed dl() to only accept filenames - reported by Laurent Gaffie. (Stas)
- Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887).
(Christian Hoffmann)
+- Fixed iconv_*() functions to limit argument sizes as workaround to libc
+ bug (CVE-2007-4783, CVE-2007-4840). (Christian Hoffmann, Stas)
- Fixed missing brackets leading to build warning and error in the log.
Win32 code). (Andrey)
- Fixed leaks with multiple connects on one mysqli object. (Andrey)