iliaa Sun Mar 25 15:27:51 2007 UTC
Modified files: (Branch: PHP_4_4)
/php-src NEWS
Log:
Bug fixes
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.1247.2.920.2.213&r2=1.1247.2.920.2.214&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.1247.2.920.2.213 php-src/NEWS:1.1247.2.920.2.214
--- php-src/NEWS:1.1247.2.920.2.213 Sun Mar 18 17:19:30 2007
+++ php-src/NEWS Sun Mar 25 15:27:51 2007
@@ -1,6 +1,8 @@
PHP 4 NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? 2007, Version 4.4.7
+- Fixed CRLF injection inside ftp_putcmd(). (Ilia)
+- Fixed MOPB-32-2007 (Double free inside session_decode()). (Ilia)
- Fixed MOPB-21-2007 An open_basedir/safe_mode bypass inside the
compress.bzip2 wraper. (Ilia)
- Fixed MOPB-22-2007 PHP session_regenerate_id() Double Free Vulnerability.
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
