summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2021-01-01 21:06:07 -0800
committerChristoph M. Becker <cmbecker69@gmx.de>2021-01-04 11:49:32 +0100
commitd4f5aed22193106271510efd643ba8f349b7d85f (patch)
treeacaae10deefffee387c0f51877e1906b5abfd390 /NEWS
parent45f25e16d21abfb7a12315e6591c097c4f52ce17 (diff)
downloadphp-git-php-7.3.26.tar.gz
Fix #77423: parse_url() will deliver a wrong host to userphp-7.3.26PHP-7.3.26
(cherry picked from commit 128fca40376140c60b47a1c3750bb6435866838e)
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS2
1 files changed, 2 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index e3c0c8e112..f7418f769e 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,8 @@ PHP NEWS
07 Jan 2021, PHP 7.3.26
- Standard:
+ . Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo).
+ (CVE-2020-7071) (cmb)
. Fixed bug #80457 (stream_get_contents() fails with maxlength=-1 or default).
(bruno dot premont at restena dot lu)