Skip to content

Commit 7039eaa

Browse files
committed
Add CVE IDs for PHP 7.0.9
1 parent b9da410 commit 7039eaa

File tree

1 file changed

+12
-11
lines changed

1 file changed

+12
-11
lines changed

ChangeLog-7.php

Lines changed: 12 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -148,7 +148,7 @@
148148
</ul></li>
149149
<li>Wddx:
150150
<ul>
151-
<li><?php bugfix(72564); ?> (boolean always deserialized as "true") (Remi)</li>
151+
<li><?php bugfix(72564); ?> (boolean always deserialized as "true").</li>
152152
<li><?php bugfix(72142); ?> (WDDX Packet Injection Vulnerability in wddx_serialize_value()).</li>
153153
<li><?php bugfix(72749); ?> (wddx_deserialize allows illegal memory access) (Stas)</li>
154154
<li><?php bugfix(72750); ?> (wddx_deserialize null dereference).</li>
@@ -168,12 +168,12 @@
168168
<ul><li>Core:
169169
<ul>
170170
<li><?php bugfix(72508); ?> (strange references after recursive function call and "switch" statement).</li>
171-
<li><?php bugfix(72513); ?> (Stack-based buffer overflow vulnerability in virtual_file_ex).</li>
172-
<li><?php bugfix(72573); ?> (HTTP_PROXY is improperly trusted by some PHP libraries and applications).</li>
171+
<li><?php bugfix(72513); ?> (Stack-based buffer overflow vulnerability in virtual_file_ex). (CVE-2016-6289)</li>
172+
<li><?php bugfix(72573); ?> (HTTP_PROXY is improperly trusted by some PHP libraries and applications). (CVE-2016-5385)</li>
173173
</ul></li>
174174
<li>bz2:
175175
<ul>
176-
<li><?php bugfix(72613); ?> (Inadequate error handling in bzread()).</li>
176+
<li><?php bugfix(72613); ?> (Inadequate error handling in bzread()). (CVE-2016-5399)</li>
177177
</ul></li>
178178
<li>CLI:
179179
<ul>
@@ -189,8 +189,8 @@
189189
</ul></li>
190190
<li>Exif:
191191
<ul>
192-
<li><?php bugfix(72603); ?> (Out of bound read in exif_process_IFD_in_MAKERNOTE).</li>
193-
<li><?php bugfix(72618); ?> (NULL Pointer Dereference in exif_process_user_comment).</li>
192+
<li><?php bugfix(72603); ?> (Out of bound read in exif_process_IFD_in_MAKERNOTE). (CVE-2016-6291)</li>
193+
<li><?php bugfix(72618); ?> (NULL Pointer Dereference in exif_process_user_comment). (CVE-2016-6292)</li>
194194
</ul></li>
195195
<li>GD:
196196
<ul>
@@ -199,13 +199,14 @@
199199
<li><?php bugfix(64641); ?> (imagefilledpolygon doesn't draw horizontal line).</li>
200200
<li><?php bugfix(72512); ?> (gdImageTrueColorToPaletteBody allows arbitrary write/read access).</li>
201201
<li><?php bugfix(72519); ?> (imagegif/output out-of-bounds access).</li>
202-
<li><?php bugfix(72558); ?> (Integer overflow error within _gdContributionsAlloc()).</li>
202+
<li><?php bugfix(72558); ?> (Integer overflow error within _gdContributionsAlloc()). (CVE-2016-6207)</li>
203203
<li><?php bugfix(72482); ?> (Ilegal write/read access caused by gdImageAALine overflow).</li>
204204
<li><?php bugfix(72494); ?> (imagecropauto out-of-bounds access).</li>
205205
</ul></li>
206206
<li>Intl:
207207
<ul>
208-
<li><?php bugfix(72533); ?> (locale_accept_from_http out-of-bounds access).</li>
208+
209+
<li><?php bugfix(72533); ?> (locale_accept_from_http out-of-bounds access). (CVE-2016-6294)</li>
209210
</ul></li>
210211
<li>Mbstring:
211212
<ul>
@@ -241,19 +242,19 @@
241242
</ul></li>
242243
<li>SNMP:
243244
<ul>
244-
<li><?php bugfix(72479); ?> (Use After Free Vulnerability in SNMP with GC and unserialize()).</li>
245+
<li><?php bugfix(72479); ?> (Use After Free Vulnerability in SNMP with GC and unserialize()). (CVE-2016-6295)</li>
245246
</ul></li>
246247
<li>Streams:
247248
<ul>
248249
<li><?php bugfix(72439); ?> (Stream socket with remote address leads to a segmentation fault).</li>
249250
</ul></li>
250251
<li>XMLRPC:
251252
<ul>
252-
<li><?php bugfix(72606); ?> (heap-buffer-overflow (write) simplestring_addn simplestring.c).</li>
253+
<li><?php bugfix(72606); ?> (heap-buffer-overflow (write) simplestring_addn simplestring.c). (CVE-2016-6296)</li>
253254
</ul></li>
254255
<li>Zip:
255256
<ul>
256-
<li><?php bugfix(72520); ?> (Stack-based buffer overflow vulnerability in php_stream_zip_opener).</li>
257+
<li><?php bugfix(72520); ?> (Stack-based buffer overflow vulnerability in php_stream_zip_opener). (CVE-2016-6297)</li>
257258
</ul></li>
258259
</ul>
259260
<!-- }}} --></section>

0 commit comments

Comments
 (0)