com web/php: Add CVE ID to bug #74101 (PHP 7.0.21 and 7.1.7): ChangeLog-7.php
| From: | Lior Kaplan | Date: | Mon, 15 Jan 2018 13:57:59 +0000 |
| Subject: | com web/php: Add CVE ID to bug #74101 (PHP 7.0.21 and 7.1.7): ChangeLog-7.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-26687@lists.php.net to get a copy of this message | ||
Commit: 7b04b6cb80b3d687965ce0feb8f6e4b5b1f5a637
Author: Lior Kaplan <kaplanlior@gmail.com> Mon, 15 Jan 2018 15:57:59 +0200
Parents: 89c4e78f360defd7c062f4daeeac2994613b230f
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=7b04b6cb80b3d687965ce0feb8f6e4b5b1f5a637
Log:
Add CVE ID to bug #74101 (PHP 7.0.21 and 7.1.7)
Bugs:
https://bugs.php.net/74101
Changed paths:
M ChangeLog-7.php
Diff:
diff --git a/ChangeLog-7.php b/ChangeLog-7.php
index 7ecf29c..4cc2b98 100644
--- a/ChangeLog-7.php
+++ b/ChangeLog-7.php
@@ -1059,7 +1059,7 @@ site_header("PHP 7 ChangeLog", array("current" =>
"docs", "css" => array("change
<li><?php bugfix(74658); ?> (Undefined constants in array properties result in broken
properties).</li>
<li>Fixed misparsing of abstract unix domain socket names.</li>
<li><?php bugfix(74603); ?> (PHP INI Parsing Stack Buffer Overflow
Vulnerability).</li>
- <li><?php bugfix(74101); ?>, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type).</li>
+ <li><?php bugfix(74101); ?> (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type). (CVE-2017-12934)</li>
<li><?php bugfix(74111); ?> (Heap buffer overread (READ: 1) finish_nested_data from
unserialize).</li>
<li><?php bugfix(74819); ?> (wddx_deserialize() heap out-of-bound read via
php_parse_date()). (CVE-2017-11145)</li>
</ul></li>
@@ -1138,7 +1138,7 @@ site_header("PHP 7 ChangeLog", array("current" =>
"docs", "css" => array("change
<li><?php bugfix(74738); ?> (Multiple [PATH=] and [HOST=] sections not properly
parsed).</li>
<li><?php bugfix(74658); ?> (Undefined constants in array properties result in broken
properties).</li>
<li>Fixed misparsing of abstract unix domain socket names.</li>
- <li><?php bugfix(74101); ?>, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type).</li>
+ <li><?php bugfix(74101); ?> (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type). (CVE-2017-12934)</li>
<li><?php bugfix(74111); ?> (Heap buffer overread (READ: 1) finish_nested_data from
unserialize).</li>
<li><?php bugfix(74603); ?> (PHP INI Parsing Stack Buffer Overflow
Vulnerability).</li>
<li><?php bugfix(74819); ?> (wddx_deserialize() heap out-of-bound read via
php_parse_date()). (CVE-2017-11145)</li>