com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS
| From: | Lior Kaplan | Date: | Thu, 18 Jun 2015 13:56:06 +0000 |
| Subject: | com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-87365@lists.php.net to get a copy of this message | ||
Commit: 811816dc25032867c3489abb8a9089a986aee185
Author: Lior Kaplan <kaplanlior@gmail.com> Thu, 18 Jun 2015 16:56:06 +0300
Parents: 0f49c205f49f92c03cffa0f0751fc15d078727d6
Branches: PHP-5.6
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=811816dc25032867c3489abb8a9089a986aee185
Log:
Add CVE to bugs #69545, #69646 and #69667
Bugs:
https://bugs.php.net/69545
https://bugs.php.net/69646
https://bugs.php.net/69667
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index f62d1d7..0fb888d 100644
--- a/NEWS
+++ b/NEWS
@@ -53,12 +53,12 @@ PHP NEWS
. Fixed POST data processing slowdown due to small input buffer size
on Windows. (Jorge Oliveira, Anatol)
. Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
- (Anatol Belski)
+ (CVE-2015-4642) (Anatol Belski)
. Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
- FTP
- . Improved fix for bug #69545 (Integer overflow in ftp_genlist()
- resulting in heap overflow). (Max Spelsberg)
+ . Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in
+ heap overflow). (CVE-2015-4643) (Max Spelsberg)
- GD:
. Fixed bug #69479 (GD fails to build with newer libvpx). (Remi)
@@ -88,7 +88,7 @@ PHP NEWS
(Matteo Bernardini, Remi)
- Postgres:
- . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)
+ . Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644) (Remi)
- Sqlite3:
. Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,