|
35 | 35 | </ul></li>
|
36 | 36 | <li>Intl:
|
37 | 37 | <ul>
|
38 |
| - <li><?php bugfix(73007); ?> (add locale length check).</li> |
| 38 | + <li><?php bugfix(73007); ?> (add locale length check). (CVE-2016-7416)</li> |
39 | 39 | </ul></li>
|
40 | 40 | <li>JSON:
|
41 | 41 | <ul>
|
|
52 | 52 | </ul></li>
|
53 | 53 | <li>Mysqlnd:
|
54 | 54 | <ul>
|
55 |
| - <li><?php bugfix(72293); ?> (Heap overflow in mysqlnd related to BIT fields).</li> |
56 |
| -</ul></li> |
57 |
| -<li>Phar: |
58 |
| -<ul> |
59 |
| - <li><?php bugfix(72928); ?> (Out of bound when verify signature of zip phar in phar_parse_zipfile).</li> |
60 |
| - <li><?php bugfix(73035); ?> (Out of bound when verify signature of tar phar in phar_parse_tarfile).</li> |
| 55 | + <li><?php bugfix(72293); ?> (Heap overflow in mysqlnd related to BIT fields). (CVE-2016-7412)</li> |
61 | 56 | </ul></li>
|
62 | 57 | <li>PDO:
|
63 | 58 | <ul>
|
|
68 | 63 | <li>Implemented FR <?php bugl(72633); ?> (Postgres PDO lastInsertId() should work without specifying a sequence).</li>
|
69 | 64 | <li><?php bugfix(72759); ?> (Regression in pgo_pgsql).</li>
|
70 | 65 | </ul></li>
|
| 66 | +<li>Phar: |
| 67 | +<ul> |
| 68 | + <li><?php bugfix(72928); ?> (Out of bound when verify signature of zip phar in phar_parse_zipfile). (CVE-2016-7414)</li> |
| 69 | + <li><?php bugfix(73035); ?> (Out of bound when verify signature of tar phar in phar_parse_tarfile).</li> |
| 70 | +</ul></li> |
71 | 71 | <li>SPL:
|
72 | 72 | <ul>
|
73 |
| - <li><?php bugfix(73029); ?> (Missing type check when unserializing SplArray).</li> |
| 73 | + <li><?php bugfix(73029); ?> (Missing type check when unserializing SplArray). (CVE-2016-7417)</li> |
74 | 74 | </ul></li>
|
75 | 75 | <li>Standard:
|
76 | 76 | <ul>
|
|
81 | 81 | <li><?php bugfix(73011); ?> (integer overflow in fgets cause heap corruption).</li>
|
82 | 82 | <li><?php bugfix(73017); ?> (memory corruption in wordwrap function).</li>
|
83 | 83 | <li><?php bugfix(73045); ?> (integer overflow in fgetcsv caused heap corruption).</li>
|
84 |
| - <li><?php bugfix(73052); ?> (Memory Corruption in During Deserialized-object Destruction) (Stas)</li> |
| 84 | + <li><?php bugfix(73052); ?> (Memory Corruption in During Deserialized-object Destruction). (CVE-2016-7411)</li> |
85 | 85 | </ul></li>
|
86 | 86 | <li>Streams:
|
87 | 87 | <ul>
|
88 | 88 | <li><?php bugfix(72853); ?> (stream_set_blocking doesn't work).</li>
|
89 | 89 | </ul></li>
|
90 | 90 | <li>Wddx:
|
91 | 91 | <ul>
|
92 |
| - <li><?php bugfix(72860); ?> (wddx_deserialize use-after-free).</li> |
93 |
| - <li><?php bugfix(73065); ?> (Out-Of-Bounds Read in php_wddx_push_element).</li> |
| 92 | + <li><?php bugfix(72860); ?> (wddx_deserialize use-after-free). (CVE-2016-7413)</li> |
| 93 | + <li><?php bugfix(73065); ?> (Out-Of-Bounds Read in php_wddx_push_element). (CVE-2016-7418)</li> |
94 | 94 | </ul></li>
|
95 | 95 | <li>XML:
|
96 | 96 | <ul>
|
|
0 commit comments