com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS
| From: | Lior Kaplan | Date: | Thu, 18 Jun 2015 13:51:20 +0000 |
| Subject: | com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-87364@lists.php.net to get a copy of this message | ||
Commit: 991b2cc37be58501c34139ca650a3b5ba1804cce
Author: Lior Kaplan <kaplanlior@gmail.com> Thu, 18 Jun 2015 16:51:20 +0300
Parents: 189af22cf05793a92851ed5d168eadd527c83286
Branches: PHP-5.5
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=991b2cc37be58501c34139ca650a3b5ba1804cce
Log:
Add CVE to bugs #69545, #69646 and #69667
Bugs:
https://bugs.php.net/69545
https://bugs.php.net/69646
https://bugs.php.net/69667
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index 589a6ba..6a84335 100644
--- a/NEWS
+++ b/NEWS
@@ -43,10 +43,10 @@
(Julien)
. Fixed bug #69628 (complex GLOB_BRACE fails on Windows).
(Christoph M. Becker)
- . Improved fix for bug #69545 (Integer overflow in ftp_genlist()
- resulting in heap overflow). (Max Spelsberg)
+ . Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in
+ heap overflow). (CVE-2015-4643) (Max Spelsberg)
. Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
- (Anatol Belski)
+ (CVE-2015-4642) (Anatol Belski)
. Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
- GD:
@@ -73,7 +73,7 @@
(Matteo Bernardini, Remi)
- Postgres:
- . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)
+ . Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644) (Remi)
- Opcache
. Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).