com web/php: Fix for #69324 also fixes #69443, so add its CVE (PHP 5.4.40, 5.5.24, 5.6.8): ChangeLog-5.php
| From: | Lior Kaplan | Date: | Thu, 11 Feb 2016 12:40:14 +0000 |
| Subject: | com web/php: Fix for #69324 also fixes #69443, so add its CVE (PHP 5.4.40, 5.5.24, 5.6.8): ChangeLog-5.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24541@lists.php.net to get a copy of this message | ||
Commit: d336a1a3311757730448b072695c47a582deccc2
Author: Lior Kaplan <kaplanlior@gmail.com> Thu, 11 Feb 2016 14:40:14 +0200
Parents: b0cacc3fd1c27d059e0597e0653fa62c554f3c33
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=d336a1a3311757730448b072695c47a582deccc2
Log:
Fix for #69324 also fixes #69443, so add its CVE (PHP 5.4.40, 5.5.24, 5.6.8)
Bugs:
https://bugs.php.net/69324
https://bugs.php.net/69443
Changed paths:
M ChangeLog-5.php
Diff:
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index 3e672fe..492b9d9 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -1047,7 +1047,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<li><?php bugfix(64931); ?> (phar_add_file is too restrictive on
filename).</li>
<li><?php bugfix(65467); ?> (Call to undefined method cli_arg_typ_string).</li>
<li><?php bugfix(67761); ?> (Phar::mapPhar fails for Phars inside a path containing
".tar").</li>
- <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar).
(CVE-2015-2783)</li>
+ <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar).
(CVE-2015-2783, CVE-2015-3307)</li>
<li><?php bugfix(69441); ?> (Buffer Overflow when parsing tar/zip/phar in
phar_set_inode). (CVE-2015-3329)</li>
</ul></li>
<li>Postgres:
@@ -1144,7 +1144,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<li><?php bugfix(64931); ?> (phar_add_file is too restrictive on
filename).</li>
<li><?php bugfix(65467); ?> (Call to undefined method cli_arg_typ_string).</li>
<li><?php bugfix(67761); ?> (Phar::mapPhar fails for Phars inside a path containing
".tar").</li>
- <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar).
(CVE-2015-2783)</li>
+ <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar).
(CVE-2015-2783, CVE-2015-3307)</li>
<li><?php bugfix(69441); ?> (Buffer Overflow when parsing tar/zip/phar in
phar_set_inode). (CVE-2015-3329)</li>
</ul></li>
<li>Postgres:
@@ -1201,7 +1201,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<li>Phar:
<ul>
<li><?php bugfix(68901); ?> (use after free). (CVE-2015-2301)</li>
- <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar).
(CVE-2015-2783)</li>
+ <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar).
(CVE-2015-2783, CVE-2015-3307)</li>
<li><?php bugfix(69441); ?> (Buffer Overflow when parsing tar/zip/phar in
phar_set_inode). (CVE-2015-3329)</li>
</ul></li>
<li>Postgres: