Commit: d336a1a3311757730448b072695c47a582deccc2 Author: Lior Kaplan <[email protected]> Thu, 11 Feb 2016 14:40:14 +0200 Parents: b0cacc3fd1c27d059e0597e0653fa62c554f3c33 Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=d336a1a3311757730448b072695c47a582deccc2 Log: Fix for #69324 also fixes #69443, so add its CVE (PHP 5.4.40, 5.5.24, 5.6.8) Bugs: https://bugs.php.net/69324 https://bugs.php.net/69443 Changed paths: M ChangeLog-5.php Diff: diff --git a/ChangeLog-5.php b/ChangeLog-5.php index 3e672fe..492b9d9 100644 --- a/ChangeLog-5.php +++ b/ChangeLog-5.php @@ -1047,7 +1047,7 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change <li><?php bugfix(64931); ?> (phar_add_file is too restrictive on filename).</li> <li><?php bugfix(65467); ?> (Call to undefined method cli_arg_typ_string).</li> <li><?php bugfix(67761); ?> (Phar::mapPhar fails for Phars inside a path containing ".tar").</li> - <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar). (CVE-2015-2783)</li> + <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar). (CVE-2015-2783, CVE-2015-3307)</li> <li><?php bugfix(69441); ?> (Buffer Overflow when parsing tar/zip/phar in phar_set_inode). (CVE-2015-3329)</li> </ul></li> <li>Postgres: @@ -1144,7 +1144,7 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change <li><?php bugfix(64931); ?> (phar_add_file is too restrictive on filename).</li> <li><?php bugfix(65467); ?> (Call to undefined method cli_arg_typ_string).</li> <li><?php bugfix(67761); ?> (Phar::mapPhar fails for Phars inside a path containing ".tar").</li> - <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar). (CVE-2015-2783)</li> + <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar). (CVE-2015-2783, CVE-2015-3307)</li> <li><?php bugfix(69441); ?> (Buffer Overflow when parsing tar/zip/phar in phar_set_inode). (CVE-2015-3329)</li> </ul></li> <li>Postgres: @@ -1201,7 +1201,7 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change <li>Phar: <ul> <li><?php bugfix(68901); ?> (use after free). (CVE-2015-2301)</li> - <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar). (CVE-2015-2783)</li> + <li><?php bugfix(69324); ?> (Buffer Over-read in unserialize when parsing Phar). (CVE-2015-2783, CVE-2015-3307)</li> <li><?php bugfix(69441); ?> (Buffer Overflow when parsing tar/zip/phar in phar_set_inode). (CVE-2015-3329)</li> </ul></li> <li>Postgres: -- PHP Webmaster List Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
