Update NEWS with entries for security fixes

This commit is contained in:
Jakub Zelenka 2025-06-26 11:24:54 +02:00
parent 9cb3d8d200
commit 7b33b1c916
No known key found for this signature in database
GPG key ID: 1C0779DC5C0A9DE4

12
NEWS
View file

@ -1,8 +1,18 @@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? ????, PHP 8.1.33
03 Jul 2025, PHP 8.1.33
- PGSQL:
. Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
escaping). (CVE-2025-1735) (Jakub Zelenka)
- SOAP:
. Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)
- Standard:
. Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
(CVE-2025-1220) (Jakub Zelenka)
13 Mar 2025, PHP 8.1.32