com php-src: NEWS: NEWS
| From: | Remi Collet | Date: | Fri, 06 Jun 2014 12:18:29 +0000 |
| Subject: | com php-src: NEWS: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-78720@lists.php.net to get a copy of this message | ||
Commit: a53b884c47dfdcd47b87caff6abf6ed6ba155ce3
Author: Remi Collet <remi@php.net> Fri, 6 Jun 2014 14:18:29 +0200
Parents: 38e11dfaee336e4eaadf7cf10d45ae67e380392c
Branches: PHP-5.5 PHP-5.6 master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=a53b884c47dfdcd47b87caff6abf6ed6ba155ce3
Log:
NEWS
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index 44280cc..8a1a349 100644
--- a/NEWS
+++ b/NEWS
@@ -4,6 +4,9 @@ PHP NEWS
- Core:
. Fixed BC break introduced by patch for bug #67072. (Anatol)
+ . Fixed bug #67390 (insecure temporary file use in the configure script).
+ (Remi) (CVE-2014-3981)
+
- Date:
. Fixed bug #67308 (Serialize of DateTime truncates fractions of second).