Commit:    99ffe8692a23c239d4417003955b41f5ff55b4e6
Author:    Lior Kaplan <[email protected]>         Tue, 31 Mar 2015 09:06:36 
+0300
Parents:   bf053ec2b958d766257d66060a6f39ecc6470eb2
Branches:  master

Link:       
http://git.php.net/?p=web/php.git;a=commitdiff;h=99ffe8692a23c239d4417003955b41f5ff55b4e6

Log:
Add CVE for bug #69207 (PHP 5.4.39, 5.5.23, 5.6.7)

Bugs:
https://bugs.php.net/69207

Changed paths:
  M  ChangeLog-5.php


Diff:
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index 6497ebd..2dbfc06 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -22,7 +22,7 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", 
"css" => array("change
   <li><?php bugfix(69141); ?> (Missing arguments in reflection info for some 
builtin functions).</li>
   <li><?php bugfix(68976); ?> (Use After Free Vulnerability in unserialize()). 
(CVE-2015-2787)</li>
   <li><?php bugfix(69134); ?> (Per Directory Values overrides PHP_INI_SYSTEM 
configuration options).</li>
-  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path).</li>
+  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path). 
(CVE-2015-2348)</li>
 </ul></li>
 <li>CGI:
 <ul>
@@ -104,7 +104,7 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", 
"css" => array("change
   <li><?php bugfix(69141); ?> (Missing arguments in reflection info for some 
builtin functions).</li>
   <li><?php bugfix(68976); ?> (Use After Free Vulnerability in unserialize()). 
(CVE-2015-2787)</li>
   <li><?php bugfix(69134); ?> (Per Directory Values overrides PHP_INI_SYSTEM 
configuration options).</li>
-  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path).</li>
+  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path). 
(CVE-2015-2348)</li>
 </ul></li>
 <li>CGI:
 <ul>
@@ -172,7 +172,7 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", 
"css" => array("change
 <ul>
   <li><?php bugfix(68976); ?> (Use After Free Vulnerability in unserialize()). 
(CVE-2015-2787)</li>
   <li><?php bugfix(69134); ?> (Per Directory Values overrides PHP_INI_SYSTEM 
configuration options).</li>
-  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path).</li>
+  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path). 
(CVE-2015-2348)</li>
 </ul></li>
 <li>Ereg:
 <ul>


--
PHP Webmaster List Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to