summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndrey Andreev <narf@devilix.net>2016-07-26 18:45:17 +0200
committerAndrey Andreev <narf@devilix.net>2016-07-26 18:45:17 +0200
commitedd347fa069d39b9684fd61a3d6befa6ef59dab3 (patch)
treeb886b17f20c64be5ba8fa9b4fe138b19a7bafb98
parent287b795b0e423d356427405d04d0c4d3a6c3ab13 (diff)
[ci skip] Add changelog entries for security patches
-rw-r--r--user_guide_src/source/changelog.rst5
1 files changed, 5 insertions, 0 deletions
diff --git a/user_guide_src/source/changelog.rst b/user_guide_src/source/changelog.rst
index 7842136f3..156b6be56 100644
--- a/user_guide_src/source/changelog.rst
+++ b/user_guide_src/source/changelog.rst
@@ -7,6 +7,11 @@ Version 3.0.7
Release Date: Not Released
+- **Security**
+
+ - Fixed an SQL injection in the 'odbc' database driver.
+ - Updated :php:func:`set_realpath()` :doc:`Path Helpr <helpers/path_helper>` function to filter-out ``php://`` wrapper inputs.
+
- General Changes
- Updated :doc:`Image Manipulation Library <libraries/image_lib>` to validate *width* and *height* configuration values.