Commit Graph

8050 Commits

Author SHA1 Message Date
Ferenc Kovacs
ab66152c68 move the use-after-free fixes to 5.6.11 2015-07-09 20:01:37 +02:00
Xinchen Hui
ca30d5bf39 Fixed bug #70012 (Exception lost with nested finally block) 2015-07-08 17:14:19 +08:00
Xinchen Hui
26471eb69c Fixed bug #69972 (Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk()) 2015-07-07 21:37:35 +08:00
Xinchen Hui
e41f600365 Fixed bug #69970 (Use-after-free vulnerability in spl_recursive_it_move_forward_ex()) 2015-07-07 21:25:28 +08:00
Christoph M. Becker
616661e0f8 updated NEWS 2015-07-03 00:23:44 +02:00
Christoph M. Becker
7e97faa3e8 updated NEWS 2015-06-27 20:03:38 +02:00
Christoph M. Becker
0730fc8830 updated NEWS 2015-06-27 14:32:34 +02:00
Tjerk Meesters
2ff3dafccf Fixed #69882: OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra certs
Squashed commit of the following:

commit a64c1d9bc4
Author: Tomasz Sawicki <falundir@gmail.com>
Date:   Wed Jun 24 08:49:37 2015 +0200

    Fix #69882: OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra certs

    The "key values mismatch" error is triggered in openssl_pkcs12_read by
    PKCS12_parse, because it uses X509_check_private_key to separate main
    certificate (which corresponds to private key) from extra certificates.
    Extra certificates usually comes first (p12 contents are reversed as
    stack) and X509_check_private_key triggers X509_R_KEY_VALUES_MISMATCH
    error.
    The fix pops "key values mismatch" error from OpenSSL error stack for
    each extra certificate if there are any.
2015-06-26 05:33:28 +08:00
Ferenc Kovacs
1efe5b1157 5.6.12 next 2015-06-25 00:21:45 +02:00
Christoph M. Becker
e181931f77 updated NEWS 2015-06-24 00:42:24 +02:00
Christoph M. Becker
13347225ac updated NEWS 2015-06-23 19:36:59 +02:00
Christoph M. Becker
868b9328a0 Moved NEWS entry for bug #69864 to proper category 2015-06-23 17:30:31 +02:00
Christoph M. Becker
7953ff4ea3 updated NEWS 2015-06-23 16:43:12 +02:00
Nikita Popov
e09d3155a1 Merge branch 'PHP-5.5' into PHP-5.6 2015-06-20 16:40:53 +02:00
Nikita Popov
5fe078abba Fixed bug #69892 2015-06-20 16:40:14 +02:00
Anatol Belski
962fe01473 update NEWS 2015-06-18 22:04:03 +02:00
Anatol Belski
c0119ca7f3 updated NEWS 2015-06-18 22:02:37 +02:00
Lior Kaplan
811816dc25 Add CVE to bugs #69545, #69646 and #69667 2015-06-18 16:56:06 +03:00
Lior Kaplan
991b2cc37b Add CVE to bugs #69545, #69646 and #69667 2015-06-18 16:51:20 +03:00
Christoph M. Becker
e4917bc747 updated NEWS 2015-06-17 02:20:14 +02:00
Christoph M. Becker
61d58f2d9e updated NEWS 2015-06-17 02:17:40 +02:00
Matteo Beccati
3bb1a4ffe3 Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
  Fix bug #69344 (PDO PgSQL Incorrect binding numeric array with gaps)
  Fix bug #69362 (PDO-pgsql fails to connect if password contains a leading single quote)
  Fixed bug #61574 - No MSI

Conflicts:
	ext/pdo_pgsql/pgsql_driver.c
2015-06-12 02:07:02 +02:00
Matteo Beccati
b60efdce9f Fix bug #69344 (PDO PgSQL Incorrect binding numeric array with gaps) 2015-06-12 02:05:28 +02:00
Matteo Beccati
7c0b8f872e Fix bug #69362 (PDO-pgsql fails to connect if password contains a leading single quote) 2015-06-12 00:20:33 +02:00
Nikita Popov
1acf55eb75 Fixed bug #69803 2015-06-11 22:20:05 +02:00
Ferenc Kovacs
3f471c1c69 this is in 5.6.10, not in 5.6.9 2015-06-11 20:30:56 +02:00
Nikita Popov
8405265578 Fix bug #69740 2015-06-11 17:40:10 +02:00
Anatol Belski
2b0a19f4ed updated NEWS 2015-06-10 16:41:33 +02:00
Anatol Belski
9d5ab7e22f updated NEWS 2015-06-10 16:40:38 +02:00
Anatol Belski
2c55ae5261 updated NEWS 2015-06-10 11:26:00 +02:00
Anatol Belski
60e181c20a updated NEWS 2015-06-10 11:24:45 +02:00
Anatol Belski
f4707ed256 updated NEWS 2015-06-10 10:44:02 +02:00
Anatol Belski
aef5a02ebb updated NEWS 2015-06-10 10:42:31 +02:00
Ferenc Kovacs
0d7f22c157 add missing NEWS entries 2015-06-10 09:36:53 +02:00
Ferenc Kovacs
2b8ba3e9f8 add missing NEWS entries 2015-06-10 09:35:38 +02:00
Ferenc Kovacs
8574290d9b fix NEWS 2015-06-09 13:57:28 +02:00
Ferenc Kovacs
72d0796d66 these will be part of 5.6.11 2015-06-09 13:41:00 +02:00
Ferenc Kovacs
632c5d6250 add missing NEWS entry 2015-06-09 13:31:45 +02:00
Julien Pauli
5f7c1917e3 5.5.27 now 2015-06-09 10:33:29 +02:00
Lior Kaplan
b861a4a4d2 NEWS entry for: Upgrade bundled sqlite to 3.8.10.2
Includes fixes for CVE-2015-3414, CVE-2015-3415, CVE-2015-3416
2015-06-08 22:39:00 +03:00
Lior Kaplan
f5bf7b6b27 NEWS entry for: Upgrade bundled sqlite to 3.8.10.2
Includes fixes for CVE-2015-3414, CVE-2015-3415, CVE-2015-3416
2015-06-08 22:32:29 +03:00
Anatol Belski
4482c03622 updated NEWS 2015-06-08 12:12:24 +02:00
Anatol Belski
b754e3ec4b updated NEWS 2015-06-08 12:11:29 +02:00
Anatol Belski
fb49ffe62e updated NEWS for bug #69642 2015-06-05 17:58:39 +02:00
Anatol Belski
75c2aa9d3a updated NEWS for bug #69642 fix 2015-06-05 17:56:57 +02:00
Stanislav Malyshev
e96c64ed5e Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
  Fix bug #69737 - Segfault when SplMinHeap::compare produces fatal error
2015-06-01 22:53:56 -07:00
Stanislav Malyshev
1cbd25ca15 Fix bug #69737 - Segfault when SplMinHeap::compare produces fatal error 2015-06-01 22:07:16 -07:00
Dmitry Stogov
f863d89b5c Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
  Fixed bug #69732 (can induce segmentation fault with basic php code).

Conflicts:
	Zend/zend_vm_execute.h
2015-06-01 12:17:32 +03:00
Dmitry Stogov
9031a902e3 Fixed bug #69732 (can induce segmentation fault with basic php code). 2015-06-01 11:40:14 +03:00
Anatol Belski
ff30d0319a updated NEWS 2015-05-29 21:18:37 +02:00