Re: [GD-DEVEL] 2.2.2 release, upgrade recommended

--JsA8ukvOAWe7FTXPTXM71MESlWjGFU8nk
Content-Type: multipart/mixed; boundary="Ju1ql8sjf94ExSbQAwVGkue7OWpQuoDt0"
From: Remi Collet <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: Re: [GD-DEVEL] 2.2.2 release, upgrade recommended
References: <CAEZPtU5qHMmiag-9y9Xpe8T+fF+c76L5rRG41Xs0=JnQ=q=7dw@mail.gmail.com>
In-Reply-To: <CAEZPtU5qHMmiag-9y9Xpe8T+fF+c76L5rRG41Xs0=JnQ=q=7dw@mail.gmail.com>

--Ju1ql8sjf94ExSbQAwVGkue7OWpQuoDt0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Le 24/06/2016 =C3=A0 10:58, Pierre Joye a =C3=A9crit :
> hi,
>=20
> 2.2.2 has been released and contains numerous fixes including security =
ones.
>

According to release note, should fix CVE-2016-5766

> https://bugs.php.net/bug.php?id=3D72339
>
http://git.php.net/?p=3Dphp-src.git;a=3Dcommitdiff;h=3D7722455726bec8c534=
58a32851d2a87982cf0eac

But I don't see the overflow check ?
Did I miss something ?



Remi.



--Ju1ql8sjf94ExSbQAwVGkue7OWpQuoDt0--

--JsA8ukvOAWe7FTXPTXM71MESlWjGFU8nk
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAldtOPoACgkQYUppBSnxahiCxQCcCLnoLOn+imQq2d32OoZAWP94
nE0AoINdOxqT1cAWVSGyOffOCcKxfhBP
=vqkh
-----END PGP SIGNATURE-----

--JsA8ukvOAWe7FTXPTXM71MESlWjGFU8nk--