Commit 165e5169a94 for php.net
commit 165e5169a945a0d7de43835436bce6361a737ffe
Author: Jakub Zelenka <bukka@php.net>
Date: Thu Jun 26 11:27:48 2025 +0200
Update NEWS with entries for security fixes
diff --git a/NEWS b/NEWS
index 9fdb96e790d..dbb434af8e9 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,18 @@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? ????, PHP 8.2.29
+03 Jul 2025, PHP 8.2.29
+
+- PGSQL:
+ . Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
+ escaping). (CVE-2025-1735) (Jakub Zelenka)
+
+- SOAP:
+ . Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
+ via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)
+
+- Standard:
+ . Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
+ (CVE-2025-1220) (Jakub Zelenka)
13 Mar 2025, PHP 8.2.28