com php-src: update NEWS: NEWS

Commit: 7b3cce0ba0f2b5c7b9ae2ca5b492316668cf6abe Author: Stanislav Malyshev <stas@php.net> Tue, 14 Apr 2015 00:43:19 -0700 Parents: e21f87e9578884b8cc7914d1e68aca0a0b54c8b7 Branches: PHP-5.5 PHP-5.6 master Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=7b3cce0ba0f2b5c7b9ae2ca5b492316668cf6abe Log: update NEWS Changed paths: M NEWS Diff: diff --git a/NEWS b/NEWS index aaab16a..8003938 100644 --- a/NEWS +++ b/NEWS @@ -29,6 +29,10 @@ PHP NEWS ?? ??? 2015, PHP 5.5.24 +- Apache2handler: + . Fixed bug #69218 (potential remote code execution with apache 2.4 + apache2handler). (Gerrit Venema) + - Core: . Fixed bug #66609 (php crashes with __get() and ++ operator in some cases). (Dmitry, Laruence) @@ -39,10 +43,16 @@ PHP NEWS . Fixed bug #68917 (parse_url fails on some partial urls). (Wei Dai) . Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options). (Anatol Belski) + . Additional fix for bug #69152 (Type confusion vulnerability in + exception::getTraceAsString). (Stas) . Fixed bug #69212 (Leaking VIA_HANDLER func when exception thrown in __call/... arg passing). (Nikita) . Fixed bug #69221 (Segmentation fault when using a generator in combination with an Iterator). (Nikita) + . Fixed bug #69337 (php_stream_url_wrap_http_ex() type-confusion + vulnerability). (Stas) + . Fixed bug #69353 (Missing null byte checks for paths in various PHP + extensions). (Stas) - Date: . Export date_get_immutable_ce so that it can be used by extensions. (Derick @@ -51,11 +61,17 @@ PHP NEWS - Curl: . Implemented FR#69278 (HTTP2 support). (Masaki Kagaya) + . Fixed bug #69316 (Use-after-free in php_curl related to + CURLOPT_FILE/_INFILE/_WRITEHEADER). (Laruence) - Enchant: . Fixed bug #65406 (Enchant broker plugins are in the wrong place in windows builds). (Anatol) +- Fileinfo: + . Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or + segfault). (Anatol Belski) + - Filter: . Fixed bug #69202 (FILTER_FLAG_STRIP_BACKTICK ignored unless other flags are used). (Jeff Welch) @@ -77,6 +93,9 @@ PHP NEWS . Fixed bug #65467 (Call to undefined method cli_arg_typ_string). (Mike) . Fixed bug #67761 (Phar::mapPhar fails for Phars inside a path containing ".tar"). (Mike) + . Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar). (Stas) + . Fixed bug #69441 (Buffer Overflow when parsing tar/zip/phar in + phar_set_inode). (Stas) - Postgres: . Fixed bug #68741 (Null pointer dereference). (CVE-2015-1352) (Laruence)