com php-src: NEWS for cherry-picked CVE patches: NEWS
| From: | JulienPauli | Date: | Wed, 05 Mar 2014 10:08:11 +0000 |
| Subject: | com php-src: NEWS for cherry-picked CVE patches: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-76338@lists.php.net to get a copy of this message | ||
Commit: eb63f8c2a66906a617d94667f0b54f1544ac93d9
Author: Julien Pauli <jpauli@php.net> Wed, 5 Mar 2014 11:08:11 +0100
Parents: 0880851f004ba8ad793b9fb68e3ee6755245a0ba
Branches: PHP-5.5.10
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=eb63f8c2a66906a617d94667f0b54f1544ac93d9
Log:
NEWS for cherry-picked CVE patches
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index 49717f4..87ee948 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,6 @@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-20 Fev 2014, PHP 5.5.10RC1
+06 Mar 2014, PHP 5.5.10
- Core:
. Fixed Request #66574i (Allow multiple paths in php_ini_scanned_path). (Remi)
@@ -10,7 +10,12 @@ PHP NEWS
per offset too). (Derick)
- Fileinfo:
- . Bug #66731 (file: infinite recursion) (CVE-2014-1943). (Remi)
+ . Fixed bug #66731 (file: infinite recursion) (CVE-2014-1943). (Remi)
+ . Fixed bug #66820 (out-of-bounds memory access in fileinfo). (Remi)
+
+- GD:
+ . Fixed bug #66815 (imagecrop(): insufficient fix for NULL defer
+ CVE-2013-7327). (Tomas Hoger, Remi)
- JSON:
. Fixed bug #65753 (JsonSerializeable couldn't implement on module extension)