From 73c2e9153a7bee878c4d57d3dbc439edcd717ce9 Mon Sep 17 00:00:00 2001 From: Julien Pauli Date: Wed, 18 Feb 2015 12:40:38 +0100 Subject: [PATCH] Updated NEWS --- NEWS | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 9ae5f2294ca..079e077fe6a 100644 --- a/NEWS +++ b/NEWS @@ -31,7 +31,7 @@ PHP NEWS - FPM: . Fixed bug #68822 (request time is reset too early). (honghu069 at 163 dot com) -?? ??? 2015, PHP 5.5.22 +19 Feb 2015, PHP 5.5.22 - Core: . Removed support for multi-line headers, as the are deprecated by RFC 7230. @@ -40,8 +40,11 @@ PHP NEWS not validated in memory.c). (nayana at ddproperty dot com) . Fixed bug #67068 (getClosure returns somethings that's not a closure). (Danack at basereality dot com) + . Fixed bug #68942 (Use after free vulnerability in unserialize() with + DateTimeZone). (CVE-2015-0273) (Stas) . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow). (Stas) + . Added NULL byte protection to exec, system and passthru. (Yasuo) - Date: . Fixed bug #45081 (strtotime incorrectly interprets SGT time zone). (Derick) @@ -49,6 +52,10 @@ PHP NEWS - Dba: . Fixed bug #68711 (useless comparisons). (bugreports at internot dot info) +- Enchant: + . Fixed bug #6855 (heap buffer overflow in enchant_broker_request_dict()). + (Antony) + - Fileinfo: . Fixed bug #68827 (Double free with disabled ZMM). (Joshua Rogers)