From: Stanislav Malyshev <stas@php.net>
Date: Wed, 19 Sep 2007 00:41:10 +0000 (+0000)
Subject: report iconv fix
X-Git-Tag: php-5.2.5RC1~129
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=d07b041e8a518b3e247fb66c9c21a9aa27de0bc2;p=php

report iconv fix
---

diff --git a/NEWS b/NEWS
index 1e722dc287..89b4ae9488 100644
--- a/NEWS
+++ b/NEWS
@@ -12,6 +12,8 @@ PHP                                                                        NEWS
 - Fixed dl() to only accept filenames - reported by Laurent Gaffie. (Stas)
 - Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887).
   (Christian Hoffmann)
+- Fixed iconv_*() functions to limit argument sizes as workaround to libc 
+  bug (CVE-2007-4783, CVE-2007-4840). (Christian Hoffmann, Stas)
 - Fixed missing brackets leading to build warning and error in the log.
   Win32 code). (Andrey)
 - Fixed leaks with multiple connects on one mysqli object. (Andrey)