summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLior Kaplan <kaplanlior@gmail.com>2015-03-31 09:11:21 +0300
committerLior Kaplan <kaplanlior@gmail.com>2015-03-31 09:11:21 +0300
commit639f92275adf4056956d70c3188d2f774f168fdd (patch)
tree8064b3e5f987a589cb42a7813d66839bc1b9d722
parent6480725007bdc5bab4f24ac481a4cb082074851d (diff)
downloadphp-git-639f92275adf4056956d70c3188d2f774f168fdd.tar.gz
Add CVE for bug #69207
-rw-r--r--NEWS4
1 files changed, 2 insertions, 2 deletions
diff --git a/NEWS b/NEWS
index a0366d2c2b..9c437fae72 100644
--- a/NEWS
+++ b/NEWS
@@ -12,7 +12,6 @@ PHP NEWS
. Fixed bug #68917 (parse_url fails on some partial urls). (Wei Dai)
. Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM
configuration options). (Anatol Belski)
- . Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)
. Fixed bug #69212 (Leaking VIA_HANDLER func when exception thrown in
__call/... arg passing). (Nikita)
. Fixed bug #69221 (Segmentation fault when using a generator in combination
@@ -85,7 +84,8 @@ PHP NEWS
(CVE-2015-0231) (Stas)
. Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM
configuration options). (Anatol Belski)
- . Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)
+ . Fixed bug #69207 (move_uploaded_file allows nulls in path). (CVE-2015-2348)
+ (Stas)
- CGI:
. Fixed bug #69015 (php-cgi's getopt does not see $argv). (Laruence)