move CVEs in 8.0.25 changelog

This commit is contained in:
Remi Collet 2022-10-26 14:18:19 +02:00 committed by Remi Collet
parent 80ccaa3e36
commit db28ee8fd0
No known key found for this signature in database
GPG key ID: DC9FF8D3EE5AF27F

16
NEWS
View file

@ -5,14 +5,6 @@ PHP NEWS
- CLI:
. Fixed bug GH-9709 (Null pointer dereference with -w/-s options). (Adam Saponara)
- GD:
. Fixed bug #81739: OOB read due to insufficient input validation in
imageloadfont(). (CVE-2022-31630) (cmb)
- Hash:
. Fixed bug #81738: buffer overflow in hash_update() on long parameter.
(CVE-2022-37454) (nicky at mouha dot be)
- Core:
. Fixed bug GH-9752 (Generator crashes when interrupted during argument
evaluation with extra named params). (Arnaud)
@ -33,6 +25,14 @@ PHP NEWS
27 Oct 2022, PHP 8.0.25
- GD:
. Fixed bug #81739: OOB read due to insufficient input validation in
imageloadfont(). (CVE-2022-31630) (cmb)
- Hash:
. Fixed bug #81738: buffer overflow in hash_update() on long parameter.
(CVE-2022-37454) (nicky at mouha dot be)
- Session:
. Fixed bug GH-9583 (session_create_id() fails with user defined save handler
that doesn't have a validateId() method). (Girgias)