NEWS

remicollet · remicollet · commit ee591001f7a3 · 2024-04-10T13:42:51.000+02:00
(cherry picked from commit 366cc24) (cherry picked from commit dcdd49e) (cherry picked from commit 8642473)
diff --git a/NEWS b/NEWS
@@ -1,6 +1,12 @@
 PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 
+Backported from 8.1.28
+
+- Standard:
+  . Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to
+    partial CVE-2022-31629 fix). (CVE-2024-2756) (nielsdos)
+
 Backported from 8.0.30
 
 - Libxml:
