Commit:    fda25d97ffa4e623b824aa70f0ba98e9eba88ef7
Author:    Pierre Joye <pierre....@gmail.com>         Wed, 21 Mar 2012 07:06:07 
+0100
Parents:   baeaafd3951451c7dadf949c7677e90141c1e17a
Branches:  PHP-5.3

Link:       
http://git.php.net/?p=php-src.git;a=commitdiff;h=fda25d97ffa4e623b824aa70f0ba98e9eba88ef7

Log:
- update NEWS

Changed paths:
  M  NEWS


Diff:
fda25d97ffa4e623b824aa70f0ba98e9eba88ef7
diff --git a/NEWS b/NEWS
index a2d7c05..1b1db1e 100644
--- a/NEWS
+++ b/NEWS
@@ -25,6 +25,9 @@ PHP                                                           
             NEWS
   . Fixed bug #60227 (header() cannot detect the multi-line header with CR).
     (rui, Gustavo)
   . Fixed bug #60222 (time_nanosleep() does validate input params). (Ilia)
+  . Fixed bug #54374 (Insufficient validating of upload name leading to 
+    corrupted $_FILES indices). (CVE-2012-1172). (Stas, lekensteyn at
+    gmail dot com, Pierre)
   . Fixed bug #52719 (array_walk_recursive crashes if third param of the
     function is by reference). (Nikita Popov)
   . Fixed bug #51860 (Include fails with toplevel symlink to /). (Dmitry)


--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to