From: Felipe Pena <felipe@php.net>
Date: Mon, 14 Mar 2011 22:27:40 +0000 (+0000)
Subject: - BFN
X-Git-Tag: php-5.3.6~7
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=d7b8f23e2b1e81f552f893c0df2f7f32e4a5e345;p=php

- BFN
---

diff --git a/NEWS b/NEWS
index 935e2334dd..95bd8479e8 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,10 @@
 PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
+?? Mar 2011, PHP 5.3.6
+- Phar extension:
+  . Fixed bug #54247 (format-string vulnerability on Phar). (Felipe)
+    (CVE-2011-1153)
+
 10 Mar 2011, PHP 5.3.6RC3
 - Shmop extension:
   . Fixed bug #54193 (Integer overflow in shmop_read()). (Felipe)