Fixes bug from SA-CORE-2018-002 changes, updates CHANGELOG (#117)

* Fixes bug from SA-CORE-2018-002 changes, updates CHANGELOG

* Fix version in system.module, align version with d6lts/drupal

Author: pwolanin

CHANGELOG.txt

@@ -1,3 +1,19 @@
+Drupal 6.43 LTS, 2018-03-29
+-----------------------
+- Fixes bug from SA-CORE-2018-002 changes, update version.
+
+Drupal 6.41, Drupal 6.42
+-----------------------
+Skipped to bring version number in line with
+https://github.com/d6lts/drupal
+
+Drupal 6.40 Pressflow, 2018-03-28
+-----------------------
+- Fixed security issues (multiple vulnerabilities). See SA-CORE-2018-002.
+
+Drupal 6.39 Pressflow, 2018-02-21
+-----------------------
+- Fixed security issues (multiple vulnerabilities). See SA-CORE-2018-001.
 
 Drupal 6.38, 2016-02-24 - Final release
 ---------------------------------------

includes/bootstrap.inc

@@ -2258,6 +2258,8 @@ function _drupal_bootstrap_sanitize_input(&$input, $whitelist = array()) {
         $sanitized_keys = array_merge($sanitized_keys, _drupal_bootstrap_sanitize_input($input[$key], $whitelist));
       }
     }
+    // PHP 5.x will leave the array pointer at the end without this.
+    reset($input);
   }
 
   return $sanitized_keys;

modules/system/system.module

@@ -8,7 +8,7 @@
 /**
  * The current system version.
  */
-define('VERSION', '6.40');
+define('VERSION', '6.43');
 
 /**
  * Core API compatibility.