From: Lior Kaplan <kaplanlior@gmail.com>
Date: Thu, 28 Apr 2016 18:12:27 +0000 (+0300)
Subject: Add NEWS entry for bug #71331 (fixed in 7.0.3)
X-Git-Tag: php-7.0.7RC1~55
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9e57360c837b50999e7f8b8115b119aeb1f75825;p=php

Add NEWS entry for bug #71331 (fixed in 7.0.3)
---

diff --git a/NEWS b/NEWS
index 177542410b..50d72d3308 100644
--- a/NEWS
+++ b/NEWS
@@ -387,6 +387,8 @@ PHP                                                                        NEWS
 
 - Phar:
   . Fixed bug #71354 (Heap corruption in tar/zip/phar parser). (Stas)
+  . Fixed bug #71331 (Uninitialized pointer in phar_make_dirstream()).
+    (CVE-2016-4343) (Stas)
   . Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
     (Stas)
   . Fixed bug #71488 (Stack overflow when decompressing tar archives). (Stas)