com php-src: update NEWS: NEWS

From: Date: Wed, 15 Oct 2014 12:03:11 +0000
Subject: com php-src: update NEWS: NEWS
Groups: php.cvs 
Request: Send a blank email to php-cvs+get-82326@lists.php.net to get a copy of this message
Commit: 9a5184840906c9819e5bc93ca560f8337d66b97f Author: Ferenc Kovacs <tyrael@php.net> Wed, 15 Oct 2014 14:03:11 +0200 Parents: a2cda214d668b13db8242216551ab94a58e66b97 Branches: PHP-5.6.2 Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=9a5184840906c9819e5bc93ca560f8337d66b97f Log: update NEWS Changed paths: M NEWS Diff: diff --git a/NEWS b/NEWS index 8755e5e..8327cb7 100644 --- a/NEWS +++ b/NEWS @@ -1,5 +1,21 @@ PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| +16 Oct 2014, PHP 5.6.2 + +- Core: + . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). + (CVE-2014-3669) (Stas) + +- cURL: + . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas) + +- EXIF: + . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670) + (Stas) + +- XMLRPC: + . Fixed bug #68027 (Global buffer overflow in mkgmtime() function). + (CVE-2014-3668) (Stas) 02 Oct 2014, PHP 5.6.1

« previous php.cvs (#82326) next »