com web/php: Add CVE for #70350 (PHP 7.0.0): ChangeLog-7.php
| From: | Lior Kaplan | Date: | Sun, 20 Mar 2016 06:39:22 +0000 |
| Subject: | com web/php: Add CVE for #70350 (PHP 7.0.0): ChangeLog-7.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24614@lists.php.net to get a copy of this message | ||
Commit: 7b150ab230a666d52a73ced0df457eaa2099a9ad
Author: Lior Kaplan <kaplanlior@gmail.com> Sun, 20 Mar 2016 08:39:22 +0200
Parents: 2719af9a70caa3dd45bf3be45bcf5b760225c2c0
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=7b150ab230a666d52a73ced0df457eaa2099a9ad
Log:
Add CVE for #70350 (PHP 7.0.0)
Bugs:
https://bugs.php.net/70350
Changed paths:
M ChangeLog-7.php
Diff:
diff --git a/ChangeLog-7.php b/ChangeLog-7.php
index c79f6a4..37e680f 100644
--- a/ChangeLog-7.php
+++ b/ChangeLog-7.php
@@ -868,7 +868,7 @@ site_header("PHP 7 ChangeLog", array("current" =>
"docs", "css" => array("change
<li>Zip:
<ul>
<li><?php bugfix(70322); ?> (ZipArchive::close() doesn't indicate
errors).</li>
- <li><?php bugfix(70350); ?> (ZipArchive::extractTo allows for directory traversal
when creating directories).</li>
+ <li><?php bugfix(70350); ?> (ZipArchive::extractTo allows for directory traversal
when creating directories). (CVE-2014-9767)</li>
<li>Added ZipArchive::setCompressionName and ZipArchive::setCompressionIndex
methods.</li>
<li>Update bundled libzip to 1.0.1.</li>
<li><?php bugfix(67161); ?> (ZipArchive::getStream() returns NULL for certain
file).</li>