stas Thu Mar 8 22:53:37 2007 UTC
Modified files: (Branch: PHP_5_2)
/php-src NEWS
Log:
more fixes
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.580&r2=1.2027.2.547.2.581&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.2027.2.547.2.580 php-src/NEWS:1.2027.2.547.2.581
--- php-src/NEWS:1.2027.2.547.2.580 Thu Mar 8 22:44:22 2007
+++ php-src/NEWS Thu Mar 8 22:53:37 2007
@@ -80,8 +80,10 @@
(jdolecek at netbsd dot org, Nuno)
- Limit nesting level of input variables with max_input_nesting_level
as fix for MOPB-03-2007 (Stas)
-- Fix substr_compare and substr_count information leak (MOPB-14) (Stas, Ilia)
-- Fix crash on op-assign where argument is string offset (Brian, Stas)
+- Fixed substr_compare and substr_count information leak (MOPB-14) (Stas, Ilia)
+- Fixed crash on op-assign where argument is string offset (Brian, Stas)
+- Fixed bug #38710 (data leakage because of nonexisting boundary checking in
+ statements in mysqli) (Stas)
08 Feb 2007, PHP 5.2.1
- Added read-timeout context option "timeout" for HTTP streams. (Hannes,
Ilia).
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
