cvs: php-src(PHP_5_2) / NEWS
| From: | Stanislav Malyshev | Date: | Fri, 02 Mar 2007 22:00:50 +0000 |
| Subject: | cvs: php-src(PHP_5_2) / NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-43350@lists.php.net to get a copy of this message | ||
stas Fri Mar 2 22:00:50 2007 UTC
Modified files: (Branch: PHP_5_2)
/php-src NEWS
Log:
limit input variable nesting
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.565&r2=1.2027.2.547.2.566&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.2027.2.547.2.565 php-src/NEWS:1.2027.2.547.2.566
--- php-src/NEWS:1.2027.2.547.2.565 Thu Mar 1 11:23:54 2007
+++ php-src/NEWS Fri Mar 2 22:00:50 2007
@@ -60,6 +60,8 @@
- Fixed bug #36496 (SSL support in imap_open() not working on Windows). (Edin)
- Fixed bug #34794 (proc_close() hangs when used with two processes).
(jdolecek at netbsd dot org, Nuno)
+- Limit nesting level of input variables with max_input_nesting_level
+ as fix for MOPB-03-2007 (Stas)
08 Feb 2007, PHP 5.2.1
- Added read-timeout context option "timeout" for HTTP streams. (Hannes, Ilia).