Commit: 0efa83a63f6835143b3aecd88530ed40ca51b973 Author: Lior Kaplan <[email protected]> Mon, 25 Aug 2014 23:30:54 +0300 Parents: 606868ac276bc2b9fcd2f17032f47f8d87785164 Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=0efa83a63f6835143b3aecd88530ed40ca51b973 Log: Add CVE IDs for bugs #67410, #67411, #67412 and #67413 under PHP-5.3.29 Bugs: https://bugs.php.net/67410 https://bugs.php.net/67411 https://bugs.php.net/67412 https://bugs.php.net/67413 Changed paths: M ChangeLog-5.php Diff: diff --git a/ChangeLog-5.php b/ChangeLog-5.php index 81712ac..94b5fc9 100644 --- a/ChangeLog-5.php +++ b/ChangeLog-5.php @@ -155,10 +155,10 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change <li><?php bugfix(67326); ?> (fileinfo: cdf_read_short_sector insufficient boundary check). (CVE-2014-0207)</li> <li><?php bugfix(67327); ?> (fileinfo: CDF infinite loop in nelements DoS). (CVE-2014-0238)</li> <li><?php bugfix(67328); ?> (fileinfo: fileinfo: numerous file_printf calls resulting in performance degradation). (CVE-2014-0237)</li> - <li><?php bugfix(67410); ?> (fileinfo: mconvert incorrect handling of truncated pascal string size).</li> - <li><?php bugfix(67411); ?> (fileinfo: cdf_check_stream_offset insufficient boundary check).</li> - <li><?php bugfix(67412); ?> (fileinfo: cdf_count_chain insufficient boundary check).</li> - <li><?php bugfix(67413); ?> (fileinfo: cdf_read_property_info insufficient boundary check).</li> + <li><?php bugfix(67410); ?> (fileinfo: mconvert incorrect handling of truncated pascal string size) (CVE-2014-3478).</li> + <li><?php bugfix(67411); ?> (fileinfo: cdf_check_stream_offset insufficient boundary check) (CVE-2014-3479).</li> + <li><?php bugfix(67412); ?> (fileinfo: cdf_count_chain insufficient boundary check) (CVE-2014-3480).</li> + <li><?php bugfix(67413); ?> (fileinfo: cdf_read_property_info insufficient boundary check) (CVE-2014-3487).</li> </ul></li> <li>Intl: <ul> -- PHP Webmaster List Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
