archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 13:38:49 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Update NEWS with entries for security fixes

Browse source
This commit is contained in:
Jakub Zelenka 2025-06-26 11:29:28 +02:00
parent 026ab919d0
commit 5e5b164bb4
No known key found for this signature in database
GPG key ID: 1C0779DC5C0A9DE4
1 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
NEWS
View file

@ -1,6 +1,6 @@
PHP NEWS PHP NEWS
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? ????, PHP 8.3.23 03 Jul 2025, PHP 8.3.23
- Core: - Core:
. Fixed GH-18695 (zend_ast_export() - float number is not preserved). . Fixed GH-18695 (zend_ast_export() - float number is not preserved).
@ -38,6 +38,10 @@ PHP NEWS
. Fixed bug #74796 (Requests through http proxy set peer name). . Fixed bug #74796 (Requests through http proxy set peer name).
(Jakub Zelenka) (Jakub Zelenka)
- PGSQL:
. Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
escaping). (CVE-2025-1735) (Jakub Zelenka)
- Phar: - Phar:
. Add missing filter cleanups on phar failure. (nielsdos) . Add missing filter cleanups on phar failure. (nielsdos)
. Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek). (nielsdos) . Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek). (nielsdos)
@ -60,8 +64,14 @@ PHP NEWS
. Fix memory leak when calloc() fails in php_readline_completion_cb(). . Fix memory leak when calloc() fails in php_readline_completion_cb().
(nielsdos) (nielsdos)
- Soap: - SOAP:
. Fix memory leaks in php_http.c when call_user_function() fails. (nielsdos) . Fix memory leaks in php_http.c when call_user_function() fails. (nielsdos)
. Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)
- Standard:
. Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
(CVE-2025-1220) (Jakub Zelenka)
- Tidy: - Tidy:
. Fix memory leak in tidy output handler on error. (nielsdos) . Fix memory leak in tidy output handler on error. (nielsdos)