com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS
| From: | Lior Kaplan | Date: | Thu, 18 Jun 2015 12:45:10 +0000 |
| Subject: | com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-87363@lists.php.net to get a copy of this message | ||
Commit: 5f67caad54c95c6de322ff9ec6af8143085aa6dc
Author: Lior Kaplan <kaplanlior@gmail.com> Thu, 18 Jun 2015 15:45:10 +0300
Parents: 7f4e1a0eefdd4fb0addf9ff95eef3ccba92a9d87
Branches: PHP-5.4
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=5f67caad54c95c6de322ff9ec6af8143085aa6dc
Log:
Add CVE to bugs #69545, #69646 and #69667
Bugs:
https://bugs.php.net/69545
https://bugs.php.net/69646
https://bugs.php.net/69667
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index da34268..7f1bf5d 100644
--- a/NEWS
+++ b/NEWS
@@ -6,9 +6,9 @@ PHP NEWS
- Core:
. Imroved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in
- heap overflow). (Max Spelsberg)
+ heap overflow). (CVE-2015-4643) (Max Spelsberg)
. Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
- (Anatol Belski)
+ (CVE-2015-4642) (Anatol Belski)
. Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
- Litespeed SAPI:
@@ -19,7 +19,7 @@ PHP NEWS
additional headers). (Yasuo)
- Postgres:
- . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)
+ . Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644) (Remi)
- Sqlite3:
. Upgrade bundled sqlite to 3.8.10..2. (CVE-2015-3414, CVE-2015-3415,