com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS

From: Date: Thu, 18 Jun 2015 13:56:06 +0000
Subject: com php-src: Add CVE to bugs #69545, #69646 and #69667: NEWS
Groups: php.cvs 
Request: Send a blank email to php-cvs+get-87365@lists.php.net to get a copy of this message
Commit: 811816dc25032867c3489abb8a9089a986aee185 Author: Lior Kaplan <kaplanlior@gmail.com> Thu, 18 Jun 2015 16:56:06 +0300 Parents: 0f49c205f49f92c03cffa0f0751fc15d078727d6 Branches: PHP-5.6 Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=811816dc25032867c3489abb8a9089a986aee185 Log: Add CVE to bugs #69545, #69646 and #69667 Bugs: https://bugs.php.net/69545 https://bugs.php.net/69646 https://bugs.php.net/69667 Changed paths: M NEWS Diff: diff --git a/NEWS b/NEWS index f62d1d7..0fb888d 100644 --- a/NEWS +++ b/NEWS @@ -53,12 +53,12 @@ PHP NEWS . Fixed POST data processing slowdown due to small input buffer size on Windows. (Jorge Oliveira, Anatol) . Fixed bug #69646 (OS command injection vulnerability in escapeshellarg). - (Anatol Belski) + (CVE-2015-4642) (Anatol Belski) . Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas) - FTP - . Improved fix for bug #69545 (Integer overflow in ftp_genlist() - resulting in heap overflow). (Max Spelsberg) + . Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in + heap overflow). (CVE-2015-4643) (Max Spelsberg) - GD: . Fixed bug #69479 (GD fails to build with newer libvpx). (Remi) @@ -88,7 +88,7 @@ PHP NEWS (Matteo Bernardini, Remi) - Postgres: - . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi) + . Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644) (Remi) - Sqlite3: . Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,

« previous php.cvs (#87365) next »