Commit:    7ffb77d243897a1a9d39a6a51715d9ff3c14e02a
Author:    Stanislav Malyshev <s...@php.net>         Tue, 26 Feb 2013 22:20:21 
-0800
Parents:   7c082325091ee7bfcf0e1e8b488b1e9fa66f0739
Branches:  PHP-5.4 PHP-5.5 master

Link:       
http://git.php.net/?p=php-src.git;a=commitdiff;h=7ffb77d243897a1a9d39a6a51715d9ff3c14e02a

Log:
add news for SOAP fixes

Changed paths:
  M  NEWS


Diff:
diff --git a/NEWS b/NEWS
index 5fea27a..6600eed 100644
--- a/NEWS
+++ b/NEWS
@@ -23,6 +23,11 @@ PHP                                                          
              NEWS
   . Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
     (Johannes)
 
+- SOAP
+  . Added check that soap.wsdl_cache_dir conforms to open_basedir
+    (CVE-2013-1635). (Dmitry)
+  . Disabled external entities loading (CVE-2013-1643). (Dmitry)
+
 - SPL:
   . Fixed bug #64264 (SPLFixedArray toArray problem). (Laruence)
   . Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).


--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to