Skip to content

Commit 0d68d0a

Browse files
committed
Add security bugs fixed in 5.5.18
1 parent e06da17 commit 0d68d0a

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

NEWS

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -265,6 +265,15 @@ PHP NEWS
265265
. Fixed bug #67633 (A foreach on an array returned from a function not doing
266266
copy-on-write). (Nikita)
267267
. Fixed bug #51800 (proc_open on Windows hangs forever). (Anatol)
268+
. Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)).
269+
(CVE-2014-3669) (Stas)
270+
271+
- cURL:
272+
. Fixed bug #68089 (NULL byte injection - cURL lib). (Stas)
273+
274+
- EXIF:
275+
. Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
276+
(Stas)
268277

269278
- FPM:
270279
. Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable

0 commit comments

Comments
 (0)