Skip to content

Commit b97a41a

Browse files
committed
NEWS for 8.1.31 backports
(cherry picked from commit 22bdb43) (cherry picked from commit d8d682d)
1 parent 6b8357c commit b97a41a

File tree

1 file changed

+24
-0
lines changed

1 file changed

+24
-0
lines changed

NEWS

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,30 @@
11
PHP NEWS
22
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
33

4+
Backported from 8.1.31
5+
6+
- CLI:
7+
. Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data
8+
Processing in CLI SAPI Interface). (nielsdos)
9+
10+
- LDAP:
11+
. Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
12+
(nielsdos)
13+
14+
- PDO DBLIB:
15+
. Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing
16+
OOB writes). (CVE-2024-11236) (nielsdos)
17+
18+
- PDO Firebird:
19+
. Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter
20+
causing OOB writes). (CVE-2024-11236) (nielsdos)
21+
22+
- Streams:
23+
. Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context
24+
might allow for CRLF injection in URIs). (CVE-2024-11234) (Jakub Zelenka)
25+
. Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with
26+
convert.quoted-printable-decode filter). (CVE-2024-11233) (nielsdos)
27+
428
Backported from 8.1.30
529

630
- CGI:

0 commit comments

Comments
 (0)