|
35 | 35 | </ul></li> |
36 | 36 | <li>Intl: |
37 | 37 | <ul> |
38 | | - <li><?php bugfix(73007); ?> (add locale length check).</li> |
| 38 | + <li><?php bugfix(73007); ?> (add locale length check). (CVE-2016-7416)</li> |
39 | 39 | </ul></li> |
40 | 40 | <li>JSON: |
41 | 41 | <ul> |
|
52 | 52 | </ul></li> |
53 | 53 | <li>Mysqlnd: |
54 | 54 | <ul> |
55 | | - <li><?php bugfix(72293); ?> (Heap overflow in mysqlnd related to BIT fields).</li> |
56 | | -</ul></li> |
57 | | -<li>Phar: |
58 | | -<ul> |
59 | | - <li><?php bugfix(72928); ?> (Out of bound when verify signature of zip phar in phar_parse_zipfile).</li> |
60 | | - <li><?php bugfix(73035); ?> (Out of bound when verify signature of tar phar in phar_parse_tarfile).</li> |
| 55 | + <li><?php bugfix(72293); ?> (Heap overflow in mysqlnd related to BIT fields). (CVE-2016-7412)</li> |
61 | 56 | </ul></li> |
62 | 57 | <li>PDO: |
63 | 58 | <ul> |
|
68 | 63 | <li>Implemented FR <?php bugl(72633); ?> (Postgres PDO lastInsertId() should work without specifying a sequence).</li> |
69 | 64 | <li><?php bugfix(72759); ?> (Regression in pgo_pgsql).</li> |
70 | 65 | </ul></li> |
| 66 | +<li>Phar: |
| 67 | +<ul> |
| 68 | + <li><?php bugfix(72928); ?> (Out of bound when verify signature of zip phar in phar_parse_zipfile). (CVE-2016-7414)</li> |
| 69 | + <li><?php bugfix(73035); ?> (Out of bound when verify signature of tar phar in phar_parse_tarfile).</li> |
| 70 | +</ul></li> |
71 | 71 | <li>SPL: |
72 | 72 | <ul> |
73 | | - <li><?php bugfix(73029); ?> (Missing type check when unserializing SplArray).</li> |
| 73 | + <li><?php bugfix(73029); ?> (Missing type check when unserializing SplArray). (CVE-2016-7417)</li> |
74 | 74 | </ul></li> |
75 | 75 | <li>Standard: |
76 | 76 | <ul> |
|
81 | 81 | <li><?php bugfix(73011); ?> (integer overflow in fgets cause heap corruption).</li> |
82 | 82 | <li><?php bugfix(73017); ?> (memory corruption in wordwrap function).</li> |
83 | 83 | <li><?php bugfix(73045); ?> (integer overflow in fgetcsv caused heap corruption).</li> |
84 | | - <li><?php bugfix(73052); ?> (Memory Corruption in During Deserialized-object Destruction) (Stas)</li> |
| 84 | + <li><?php bugfix(73052); ?> (Memory Corruption in During Deserialized-object Destruction). (CVE-2016-7411)</li> |
85 | 85 | </ul></li> |
86 | 86 | <li>Streams: |
87 | 87 | <ul> |
88 | 88 | <li><?php bugfix(72853); ?> (stream_set_blocking doesn't work).</li> |
89 | 89 | </ul></li> |
90 | 90 | <li>Wddx: |
91 | 91 | <ul> |
92 | | - <li><?php bugfix(72860); ?> (wddx_deserialize use-after-free).</li> |
93 | | - <li><?php bugfix(73065); ?> (Out-Of-Bounds Read in php_wddx_push_element).</li> |
| 92 | + <li><?php bugfix(72860); ?> (wddx_deserialize use-after-free). (CVE-2016-7413)</li> |
| 93 | + <li><?php bugfix(73065); ?> (Out-Of-Bounds Read in php_wddx_push_element). (CVE-2016-7418)</li> |
94 | 94 | </ul></li> |
95 | 95 | <li>XML: |
96 | 96 | <ul> |
|
0 commit comments