From b5cb999e7fc7d669c6a0c5d28c549f7862c9f41d Mon Sep 17 00:00:00 2001 From: "Christoph M. Becker" Date: Tue, 29 Sep 2020 12:10:36 +0200 Subject: [PATCH] [ci skip] Fix version --- UPGRADING | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/UPGRADING b/UPGRADING index 2e8d358075..6f9b87c660 100644 --- a/UPGRADING +++ b/UPGRADING @@ -152,7 +152,7 @@ Reflection: and `boolean`. - SAPI: - . Starting with 7.3.24, incoming cookie names are not url-decoded. This was never + . Starting with 7.3.23, incoming cookie names are not url-decoded. This was never required by the standard, outgoing cookie names aren't encoded and this leads to security issues (CVE-2020-7070). -- 2.40.0