From: Stanislav Malyshev <stas@php.net>
Date: Tue, 7 Jul 2015 04:19:42 +0000 (-0700)
Subject: update news
X-Git-Tag: php-5.4.43~1^2~1
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=c8157619efca850889aa5aad7ca9ef32a6b4a08d;p=php

update news
---

diff --git a/NEWS b/NEWS
index 6e006a4801..c34813e633 100644
--- a/NEWS
+++ b/NEWS
@@ -1,12 +1,21 @@
 PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? 2015 PHP 5.4.43
+09 Jul 2015 PHP 5.4.43
 
 - Core:
   . Fixed bug #69768 (escapeshell*() doesn't cater to !). (cmb)
   . Fixed bug #69874 (Can't set empty additional_headers for mail()), regression
     from fix to bug #68776. (Yasuo)
 
+- Mysqlnd:
+  . Fixed bug #69669 (mysqlnd is vulnerable to BACKRONYM) (CVE-2015-3152).
+    (Andrey)
+
+- Phar:
+  . Fixed bug #69958 (Segfault in Phar::convertToData on invalid file). (Stas)
+  . Fixed bug #69923 (Buffer overflow and stack smashing error in 
+    phar_fix_filepath). (Stas)
+
 11 Jun 2015 PHP 5.4.42
 
 - Core: