com php-src: update NEWS: NEWS

Commit: ee61c7175f056fe22b2d35681212e3ab85ac2540 Author: Stanislav Malyshev <stas@php.net> Tue, 4 Aug 2015 14:37:28 -0700 Parents: 51f9a00b47159ed13dfe5bd5af7e98986aa1a6fa Branches: PHP-5.4 Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=ee61c7175f056fe22b2d35681212e3ab85ac2540 Log: update NEWS Changed paths: M NEWS Diff: diff --git a/NEWS b/NEWS index 544346f..1dcbbd2 100644 --- a/NEWS +++ b/NEWS @@ -2,8 +2,36 @@ PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| ?? ??? 2015 PHP 5.4.44 -. Fixed bug #69892 (Different arrays compare indentical due to integer key - truncation). (Nikita) +- Core: + . Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive + method calls). (Stas) + . Fixed bug #69892 (Different arrays compare indentical due to integer key + truncation). (Nikita) + . Fixed bug #70121 (unserialize() could lead to unexpected methods execution + / NULL pointer deref). (Stas) + +- OpenSSL: + . Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically + secure). (Stas) + +- Phar: + . Improved fix for bug #69441. (Anatol Belski) + . Fixed bug #70019 (Files extracted from archive may be placed outside of + destination directory). (Anatol Belski) + +- SOAP: + . Fixed bug #70081 (SoapClient info leak / null pointer dereference via + multiple type confusions). (Stas) + +- SPL: + . Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject + items). (sean.heelan) + . Fixed bug #70166 (Use After Free Vulnerability in unserialize() with + SPLArrayObject). (taoguangchen at icloud dot com) + . Fixed bug #70168 (Use After Free Vulnerability in unserialize() with + SplObjectStorage). (taoguangchen at icloud dot com) + . Fixed bug #70169 (Use After Free Vulnerability in unserialize() with + SplDoublyLinkedList). (taoguangchen at icloud dot com) 09 Jul 2015 PHP 5.4.43