com web/php: Add CVE for #71331 (PHP 5.6.18 and 7.0.3): ChangeLog-5.php ChangeLog-7.php
| From: | Lior Kaplan | Date: | Thu, 28 Apr 2016 18:19:03 +0000 |
| Subject: | com web/php: Add CVE for #71331 (PHP 5.6.18 and 7.0.3): ChangeLog-5.php ChangeLog-7.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24712@lists.php.net to get a copy of this message | ||
Commit: dc7dc11859995ff223663aa9c346b8135d945016
Author: Lior Kaplan <kaplanlior@gmail.com> Thu, 28 Apr 2016 21:16:52 +0300
Parents: d0a6e19f623263d7d0af8dde08771d57993759ad
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=dc7dc11859995ff223663aa9c346b8135d945016
Log:
Add CVE for #71331 (PHP 5.6.18 and 7..0.3)
Bugs:
https://bugs.php.net/71331
Changed paths:
M ChangeLog-5.php
M ChangeLog-7.php
Diff:
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index 148d971..3de76fa 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -191,6 +191,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<li>Phar:
<ul>
<li><?php bugfix(71354); ?> (Heap corruption in tar/zip/phar parser).
(CVE-2016-4342)</li>
+ <li><?php bugfix(71331); ?> (Uninitialized pointer in phar_make_dirstream()).
(CVE-2016-4343)</li>
<li><?php bugfix(71391); ?> (NULL Pointer Dereference in
phar_tar_setupmetadata()).</li>
<li><?php bugfix(71488); ?> (Stack overflow when decompressing tar archives).
(CVE-2016-2554)</li>
</ul></li>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php
index 57c549b..88302c4 100644
--- a/ChangeLog-7.php
+++ b/ChangeLog-7.php
@@ -225,6 +225,7 @@ site_header("PHP 7 ChangeLog", array("current" =>
"docs", "css" => array("change
<li>Phar:
<ul>
<li><?php bugfix(71354); ?> (Heap corruption in tar/zip/phar parser).
(CVE-2016-4342)</li>
+ <li><?php bugfix(71331); ?> (Uninitialized pointer in phar_make_dirstream()).
(CVE-2016-4343)</li>
<li><?php bugfix(71391); ?> (NULL Pointer Dereference in
phar_tar_setupmetadata()).</li>
<li><?php bugfix(71488); ?> (Stack overflow when decompressing tar archives).
(CVE-2016-2554)</li>
</ul></li>