com web/php: Add CVE for #72402 (PHP 5.5.37 and 5.6.23): ChangeLog-5.php
| From: | Lior Kaplan | Date: | Fri, 24 Jun 2016 20:50:10 +0000 |
| Subject: | com web/php: Add CVE for #72402 (PHP 5.5.37 and 5.6.23): ChangeLog-5.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24903@lists.php.net to get a copy of this message | ||
Commit: e7a8dbab266eca6b0e7788fb8f8ac917c7bacfb4
Author: Lior Kaplan <kaplanlior@gmail.com> Fri, 24 Jun 2016 23:50:04 +0300
Parents: 7e0e4cf393e8c79d9abc54b8fcead3747656ab52
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=e7a8dbab266eca6b0e7788fb8f8ac917c7bacfb4
Log:
Add CVE for #72402 (PHP 5.5.37 and 5..6.23)
Bugs:
https://bugs.php.net/72402
Changed paths:
M ChangeLog-5.php
Diff:
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index 36c4db5..03daaa3 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -22,7 +22,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<li><?php bugfix(72337); ?> (invalid dimensions can lead to crash).</li>
<li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow).</li>
<li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li>
- <li><?php bugfix(72446); ?> (Integer Overflow in gdImagePaletteToTrueColor()
resulting in heap overflow).</li>
+ <li><?php bugfix(72446); ?> (Integer Overflow in gdImagePaletteToTrueColor()
resulting in heap overflow). (CVE-2016-5767)</li>
</ul></li>
<li>Intl:
<ul>
@@ -76,7 +76,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<li><?php bugfix(72298); ?> (pass2_no_dither out-of-bounds access).</li>
<li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow).</li>
<li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li>
- <li><?php bugfix(72446); ?> (Integer Overflow in gdImagePaletteToTrueColor()
resulting in heap overflow).</li>
+ <li><?php bugfix(72446); ?> (Integer Overflow in gdImagePaletteToTrueColor()
resulting in heap overflow). (CVE-2016-5767)</li>
</ul></li>
<li>mbstring:
<ul>