com web/php: Add CVE for #72114 and #72135 (PHP 5.5.36, 5.6.22): ChangeLog-5.php
| From: | Lior Kaplan | Date: | Thu, 26 May 2016 21:01:12 +0000 |
| Subject: | com web/php: Add CVE for #72114 and #72135 (PHP 5.5.36, 5.6.22): ChangeLog-5.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24791@lists.php.net to get a copy of this message | ||
Commit: 22e62e413718171f8a7cd4b1396dcab16f536d3f
Author: Lior Kaplan <kaplanlior@gmail.com> Fri, 27 May 2016 00:01:12 +0300
Parents: 40dd4f9dcb50380ec5ad3456fb15f80237f3299a
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=22e62e413718171f8a7cd4b1396dcab16f536d3f
Log:
Add CVE for #72114 and #72135 (PHP 5.5.36, 5.6.22)
Bugs:
https://bugs.php.net/72114
https://bugs.php.net/72135
Changed paths:
M ChangeLog-5.php
Diff:
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index c9d13c9..cf88f22 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -13,8 +13,8 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<ul><li>Core:
<ul>
<li><?php bugfix(72172); ?> (zend_hex_strtod should not use strlen).</li>
- <li><?php bugfix(72114); ?> (Integer underflow / arbitrary null write in
fread/gzread).</li>
- <li><?php bugfix(72135); ?> (Integer Overflow in php_html_entities).</li>
+ <li><?php bugfix(72114); ?> (Integer underflow / arbitrary null write in
fread/gzread). (CVE-2016-5096)</li>
+ <li><?php bugfix(72135); ?> (Integer Overflow in php_html_entities).
(CVE-2016-5094)</li>
</ul></li>
<li>GD:
<ul>
@@ -37,8 +37,8 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<b><?php release_date('26-May-2016'); ?></b>
<ul><li>Core:
<ul>
- <li><?php bugfix(72114); ?> (Integer underflow / arbitrary null write in
fread/gzread).</li>
- <li><?php bugfix(72135); ?> (Integer Overflow in php_html_entities).</li>
+ <li><?php bugfix(72114); ?> (Integer underflow / arbitrary null write in
fread/gzread). (CVE-2016-5096)</li>
+ <li><?php bugfix(72135); ?> (Integer Overflow in php_html_entities).
(CVE-2016-5094)</li>
</ul></li>
<li>GD:
<ul>