Skip to content

Commit d4b0872

Browse files
committed
NEWS for 8.1.31 backports
(cherry picked from commit 22bdb43) (cherry picked from commit d8d682d) (cherry picked from commit b97a41a) (cherry picked from commit 46f3d44) (cherry picked from commit 49783ab) (cherry picked from commit 861b629)
1 parent f7ea640 commit d4b0872

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

NEWS

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,22 @@
11
PHP NEWS
22
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
33

4+
Backported from 8.1.31
5+
6+
- CLI:
7+
. Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data
8+
Processing in CLI SAPI Interface). (nielsdos)
9+
10+
- LDAP:
11+
. Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
12+
(nielsdos)
13+
14+
- Streams:
15+
. Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context
16+
might allow for CRLF injection in URIs). (CVE-2024-11234) (Jakub Zelenka)
17+
. Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with
18+
convert.quoted-printable-decode filter). (CVE-2024-11233) (nielsdos)
19+
420
Backported from 8.1.30
521

622
- CGI:

0 commit comments

Comments
 (0)