Skip to content

Commit 49783ab

Browse files
committed
NEWS for 8.1.31 backports
(cherry picked from commit 22bdb43) (cherry picked from commit d8d682d) (cherry picked from commit b97a41a) (cherry picked from commit 46f3d44)
1 parent abd3bf9 commit 49783ab

File tree

1 file changed

+24
-0
lines changed

1 file changed

+24
-0
lines changed

NEWS

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,30 @@
11
PHP NEWS
22
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
33

4+
Backported from 8.1.31
5+
6+
- CLI:
7+
. Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data
8+
Processing in CLI SAPI Interface). (nielsdos)
9+
10+
- LDAP:
11+
. Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
12+
(nielsdos)
13+
14+
- PDO DBLIB:
15+
. Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing
16+
OOB writes). (CVE-2024-11236) (nielsdos)
17+
18+
- PDO Firebird:
19+
. Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter
20+
causing OOB writes). (CVE-2024-11236) (nielsdos)
21+
22+
- Streams:
23+
. Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context
24+
might allow for CRLF injection in URIs). (CVE-2024-11234) (Jakub Zelenka)
25+
. Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with
26+
convert.quoted-printable-decode filter). (CVE-2024-11233) (nielsdos)
27+
428
Backported from 8.1.30
529

630
- CGI:

0 commit comments

Comments
 (0)