From 7935a1e2ffce75df715b4332c45d6f21c9dcaf80 Mon Sep 17 00:00:00 2001 From: Anatol Belski Date: Tue, 7 Jun 2016 18:44:40 +0200 Subject: [PATCH 1/2] fix NEWS --- NEWS | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 48cb9167ff2..1e1d8ad47a1 100644 --- a/NEWS +++ b/NEWS @@ -15,6 +15,9 @@ PHP NEWS . Fixed bug #72308 (fastcgi_finish_request and logging environment variables). (Laruence) +- GD: + . Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre) + - Intl: . Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol) @@ -79,7 +82,7 @@ PHP NEWS - GD: . Fixed bug #72227 (imagescale out-of-bounds read). (Stas) - . Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre) + - Intl: . Fixed #72241 (get_icu_value_internal out-of-bounds read). (Stas) From e6211038cba2a2cf03520ecf68786f77f1c64d05 Mon Sep 17 00:00:00 2001 From: Lior Kaplan Date: Tue, 7 Jun 2016 21:46:59 +0300 Subject: [PATCH 2/2] Add CVE to #66387 --- NEWS | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 1e1d8ad47a1..e2c3b94c1ef 100644 --- a/NEWS +++ b/NEWS @@ -1008,7 +1008,8 @@ PHP NEWS - GD: . Fixed bug #53156 (imagerectangle problem with point ordering). (cmb) - . Fixed bug #66387 (Stack overflow with imagefilltoborder). (cmb) + . Fixed bug #66387 (Stack overflow with imagefilltoborder). (CVE-2015-8874) + (cmb) . Fixed bug #70102 (imagecreatefromwebm() shifts colors). (cmb) . Fixed bug #66590 (imagewebp() doesn't pad to even length). (cmb) . Fixed bug #66882 (imagerotate by -90 degrees truncates image by 1px). (cmb)