#13176 closed enhancement (fixed)
php-7.4.3
| Reported by: | Bruce Dubbs | Owned by: | Bruce Dubbs |
|---|---|---|---|
| Priority: | high | Milestone: | 10.0 |
| Component: | BOOK | Version: | SVN |
| Severity: | medium | Keywords: | |
| Cc: |
Description
New point version.
Change History (6)
comment:1 by , 7 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:2 by , 7 years ago
comment:4 by , 7 years ago
| Priority: | normal → high |
|---|
Three security fixes are present here:
Fixed bug #79171 (heap-buffer-overflow in phar_extract_file). (CVE-2020-7061) Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have all-access permissions). (CVE-2020-7063) Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload Progress). (CVE-2020-7062)
Note:
See TracTickets
for help on using tickets.

Release notes are at https://www.php.net/ChangeLog-7.php