php/archived-web-php
1
0
Fork 0
mirror of https://github.com/php/web-php.git synced 2026-03-23 23:02:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add CVE ID to bugs #73832 (PHP 5.6.30, 7.0.15 and 7.1.1) and #73092 (PHP 7.0.15 and 7.1.1)

Browse Source
This commit is contained in:
Lior Kaplan
2017-01-25 01:54:48 +02:00
parent 8a3145fee2
commit 18e17344d7
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog-7.php
View File

@@ -18,8 +18,8 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change
<li><?php bugfix(73753); ?> (unserialized array pointer not advancing).</li>
<li><?php bugfix(73825); ?> (Heap out of bounds read on unserialize in finish_nested_data()). (CVE-2016-10161)</li>
<li><?php bugfix(73831); ?> (NULL Pointer Dereference while unserialize php object). (CVE-2016-10162)</li>
<li><?php bugfix(73832); ?> (Use of uninitialized memory in unserialize()).</li>
<li><?php bugfix(73092); ?> (Unserialize use-after-free when resizing object's properties hash table).</li>
<li><?php bugfix(73832); ?> (Use of uninitialized memory in unserialize()). (CVE-2017-5340)</li>
<li><?php bugfix(73092); ?> (Unserialize use-after-free when resizing object's properties hash table). (CVE-2016-7479)</li>
<li><?php bugfix(69425); ?> (Use After Free in unserialize()).</li>
<li><?php bugfix(72731); ?> (Type Confusion in Object Deserialization).</li>
</ul></li>
@@ -116,7 +116,7 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change
<li><?php bugfix(73783); ?> (SIG_IGN doesn't work when Zend Signals is enabled).</li>
<li><?php bugfix(73825); ?> (Heap out of bounds read on unserialize in finish_nested_data()). (CVE-2016-10161)</li>
<li><?php bugfix(73831); ?> (NULL Pointer Dereference while unserialize php object). (CVE-2016-10162)</li>
<li><?php bugfix(73832); ?> (Use of uninitialized memory in unserialize()).</li>
<li><?php bugfix(73832); ?> (Use of uninitialized memory in unserialize()). (CVE-2017-5340)</li>
</ul>
</li>
<li>