php/archived-web-php
1
0
Fork 0
mirror of https://github.com/php/web-php.git synced 2026-03-23 23:02:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

add CVE for session fixation - CVE-2011-4718

Browse Source
This commit is contained in:
Stanislav Malyshev
2013-08-18 14:45:19 -07:00
parent 0a5529f0b9
commit 4608e271cc
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog-5.php
View File

@@ -53,7 +53,7 @@ function peclbugl($number) { echo "<a href=\"http://pecl.php.net/bugs/bug.php?
</ul></li>
<li>Sessions:
<ul>
<li>Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions.</li>
<li>Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions (CVE-2011-4718).</li>
<li>Fixed possible buffer overflow under Windows. Note: Not a security fix.</li>
<li>Changed session.auto_start to PHP_INI_PERDIR.</li>
</ul></li>

2
archive/entries/2013-08-16-1.xml
View File

@@ -11,7 +11,7 @@
<content type="xhtml">
<div xmlns="http://www.w3.org/1999/xhtml">
<p>The PHP development team announces the immediate availability of PHP
5.5.2. About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248).
5.5.2. About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).
All users of PHP are encouraged to upgrade to this release.</p>
<p>For source downloads of PHP 5.5.2 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,

2
releases/5_5_2.php
View File

@@ -8,7 +8,7 @@ site_header("PHP 5.5.2 Release Announcement");
<h1>PHP 5.5.2 Release Announcement</h1>
<p>The PHP development team announces the immediate availability of PHP
5.5.2. About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248).
5.5.2. About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).
All users of PHP are encouraged to upgrade to this release.</p>
<p>For source downloads of PHP 5.5.2 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,