com php-src: move CVE to the right version: NEWS
| From: | Remi Collet | Date: | Thu, 22 Jan 2015 12:06:15 +0000 |
| Subject: | com php-src: move CVE to the right version: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-84315@lists.php.net to get a copy of this message | ||
Commit: 2955993947c9533ec1fc9e34bcea401f2b61e07b
Author: Remi Collet <remi@php.net> Thu, 22 Jan 2015 13:06:15 +0100
Parents: 43652d386a753c0a280790525e3593ecb416793c
Branches: PHP-5.5 PHP-5.6 master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=2955993947c9533ec1fc9e34bcea401f2b61e07b
Log:
move CVE to the right version
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index 5d8a1f9..d904fcb 100644
--- a/NEWS
+++ b/NEWS
@@ -41,8 +41,6 @@ PHP NEWS
. Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR
correctly). (Ferenc)
. Fixed bug #68583 (Crash in timeout thread). (Anatol)
- . Fixed bug #68594 (Use after free vulnerability in unserialize()).
- (CVE-2014-8142) (Stefan Esser)
. Fixed bug #68676 (Explicit Double Free). (Kalle)
. Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
(CVE-2015-0231) (Stefan Esser)
@@ -127,6 +125,8 @@ PHP NEWS
triggered). (Julien)
. Fixed bug #68370 ("unset($this)" can make the program crash). (Laruence)
. Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
+ . Fixed bug #68594 (Use after free vulnerability in unserialize()).
+ (CVE-2014-8142) (Stefan Esser)
- Date:
. Fixed day_of_week function as it could sometimes return negative values