com web/php: Add CVE for #72339 (PHP 5.5.37, 5.6.23 and 7.0.8): ChangeLog-5.php ChangeLog-7.php
| From: | Lior Kaplan | Date: | Fri, 24 Jun 2016 20:51:45 +0000 |
| Subject: | com web/php: Add CVE for #72339 (PHP 5.5.37, 5.6.23 and 7.0.8): ChangeLog-5.php ChangeLog-7.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24906@lists.php.net to get a copy of this message | ||
Commit: 7cddaf94be81342146b076d0354c6dc87c3f9e82
Author: Lior Kaplan <kaplanlior@gmail.com> Fri, 24 Jun 2016 23:51:45 +0300
Parents: e7a8dbab266eca6b0e7788fb8f8ac917c7bacfb4
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=7cddaf94be81342146b076d0354c6dc87c3f9e82
Log:
Add CVE for #72339 (PHP 5.5.37, 5.6.23 and 7.0.8)
Bugs:
https://bugs.php.net/72339
Changed paths:
M ChangeLog-5.php
M ChangeLog-7.php
Diff:
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index 03daaa3..94494a9 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -20,7 +20,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<ul>
<li><?php bugfix(72298); ?> (pass2_no_dither out-of-bounds access).</li>
<li><?php bugfix(72337); ?> (invalid dimensions can lead to crash).</li>
- <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow).</li>
+ <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow). (CVE-2016-5766)</li>
<li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li>
<li><?php bugfix(72446); ?> (Integer Overflow in gdImagePaletteToTrueColor()
resulting in heap overflow). (CVE-2016-5767)</li>
</ul></li>
@@ -74,7 +74,7 @@ site_header("PHP 5 ChangeLog", array("current" =>
"docs", "css" => array("change
<ul>
<li><?php bugfix(66387); ?> (Stack overflow with imagefilltoborder)
(CVE-2015-8874).</li>
<li><?php bugfix(72298); ?> (pass2_no_dither out-of-bounds access).</li>
- <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow).</li>
+ <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow). (CVE-2016-5766)</li>
<li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li>
<li><?php bugfix(72446); ?> (Integer Overflow in gdImagePaletteToTrueColor()
resulting in heap overflow). (CVE-2016-5767)</li>
</ul></li>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php
index 63c2482..200cae8 100644
--- a/ChangeLog-7.php
+++ b/ChangeLog-7.php
@@ -27,7 +27,7 @@ site_header("PHP 7 ChangeLog", array("current" =>
"docs", "css" => array("change
<ul>
<li><?php bugfix(72298); ?> (pass2_no_dither out-of-bounds access).</li>
<li><?php bugfix(72337); ?> (invalid dimensions can lead to crash)
(Pierre)</li>
- <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow).</li>
+ <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap
overflow). (CVE-2016-5766)</li>
<li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li>
</ul></li>
<li>Intl: