Commit: 7b04b6cb80b3d687965ce0feb8f6e4b5b1f5a637 Author: Lior Kaplan <[email protected]> Mon, 15 Jan 2018 15:57:59 +0200 Parents: 89c4e78f360defd7c062f4daeeac2994613b230f Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=7b04b6cb80b3d687965ce0feb8f6e4b5b1f5a637 Log: Add CVE ID to bug #74101 (PHP 7.0.21 and 7.1.7) Bugs: https://bugs.php.net/74101 Changed paths: M ChangeLog-7.php Diff: diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 7ecf29c..4cc2b98 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -1059,7 +1059,7 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <li><?php bugfix(74658); ?> (Undefined constants in array properties result in broken properties).</li> <li>Fixed misparsing of abstract unix domain socket names.</li> <li><?php bugfix(74603); ?> (PHP INI Parsing Stack Buffer Overflow Vulnerability).</li> - <li><?php bugfix(74101); ?>, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).</li> + <li><?php bugfix(74101); ?> (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type). (CVE-2017-12934)</li> <li><?php bugfix(74111); ?> (Heap buffer overread (READ: 1) finish_nested_data from unserialize).</li> <li><?php bugfix(74819); ?> (wddx_deserialize() heap out-of-bound read via php_parse_date()). (CVE-2017-11145)</li> </ul></li> @@ -1138,7 +1138,7 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <li><?php bugfix(74738); ?> (Multiple [PATH=] and [HOST=] sections not properly parsed).</li> <li><?php bugfix(74658); ?> (Undefined constants in array properties result in broken properties).</li> <li>Fixed misparsing of abstract unix domain socket names.</li> - <li><?php bugfix(74101); ?>, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).</li> + <li><?php bugfix(74101); ?> (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type). (CVE-2017-12934)</li> <li><?php bugfix(74111); ?> (Heap buffer overread (READ: 1) finish_nested_data from unserialize).</li> <li><?php bugfix(74603); ?> (PHP INI Parsing Stack Buffer Overflow Vulnerability).</li> <li><?php bugfix(74819); ?> (wddx_deserialize() heap out-of-bound read via php_parse_date()). (CVE-2017-11145)</li> -- PHP Webmaster List Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
