From: Julien Pauli <jpauli@php.net>
Date: Wed, 18 Feb 2015 11:40:38 +0000 (+0100)
Subject: Updated NEWS
X-Git-Tag: php-5.5.23RC1~43
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=73c2e9153a7bee878c4d57d3dbc439edcd717ce9;p=php

Updated NEWS
---

diff --git a/NEWS b/NEWS
index 9ae5f2294c..079e077fe6 100644
--- a/NEWS
+++ b/NEWS
@@ -31,7 +31,7 @@ PHP                                                                        NEWS
 - FPM:
   . Fixed bug #68822 (request time is reset too early). (honghu069 at 163 dot com)
 
-?? ??? 2015, PHP 5.5.22
+19 Feb 2015, PHP 5.5.22
 
 - Core:
   . Removed support for multi-line headers, as the are deprecated by RFC 7230.
@@ -40,8 +40,11 @@ PHP                                                                        NEWS
     not validated in memory.c). (nayana at ddproperty dot com)
   . Fixed bug #67068 (getClosure returns somethings that's not a closure). 
     (Danack at basereality dot com)
+  . Fixed bug #68942 (Use after free vulnerability in unserialize() with
+    DateTimeZone). (CVE-2015-0273) (Stas)
   . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname
     buffer overflow). (Stas)
+  . Added NULL byte protection to exec, system and passthru. (Yasuo)
 
 - Date:
   . Fixed bug #45081 (strtotime incorrectly interprets SGT time zone). (Derick)
@@ -49,6 +52,10 @@ PHP                                                                        NEWS
 - Dba:
   . Fixed bug #68711 (useless comparisons). (bugreports at internot dot info)
 
+- Enchant: 
+  . Fixed bug #6855 (heap buffer overflow in enchant_broker_request_dict()).
+    (Antony)
+
 - Fileinfo:
   . Fixed bug #68827 (Double free with disabled ZMM). (Joshua Rogers)