com php-src: - update NEWS: NEWS
| From: | Pierre Joye | Date: | Wed, 21 Mar 2012 06:06:07 +0000 |
| Subject: | com php-src: - update NEWS: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-68101@lists.php.net to get a copy of this message | ||
Commit: fda25d97ffa4e623b824aa70f0ba98e9eba88ef7
Author: Pierre Joye <pierre.php@gmail.com> Wed, 21 Mar 2012 07:06:07 +0100
Parents: baeaafd3951451c7dadf949c7677e90141c1e17a
Branches: PHP-5.3
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=fda25d97ffa4e623b824aa70f0ba98e9eba88ef7
Log:
- update NEWS
Changed paths:
M NEWS
Diff:
fda25d97ffa4e623b824aa70f0ba98e9eba88ef7
diff --git a/NEWS b/NEWS
index a2d7c05..1b1db1e 100644
--- a/NEWS
+++ b/NEWS
@@ -25,6 +25,9 @@ PHP NEWS
. Fixed bug #60227 (header() cannot detect the multi-line header with CR).
(rui, Gustavo)
. Fixed bug #60222 (time_nanosleep() does validate input params). (Ilia)
+ . Fixed bug #54374 (Insufficient validating of upload name leading to
+ corrupted $_FILES indices). (CVE-2012-1172). (Stas, lekensteyn at
+ gmail dot com, Pierre)
. Fixed bug #52719 (array_walk_recursive crashes if third param of the
function is by reference). (Nikita Popov)
. Fixed bug #51860 (Include fails with toplevel symlink to /). (Dmitry)