summaryrefslogtreecommitdiffstats
path: root/user_guide_src
diff options
context:
space:
mode:
authorAndrey Andreev <narf@devilix.net>2017-09-25 13:39:34 +0200
committerAndrey Andreev <narf@devilix.net>2017-09-25 13:39:34 +0200
commit88c1a597360f5b63371c119b64e913c9238c75b8 (patch)
tree564ea22a14e7a105c6e36d68cd90ad6284d7b2f5 /user_guide_src
parente8eb86764955c9c904b50db7c12a3be73c627406 (diff)
[ci skip] Fix potential object injection in apc cache driver; deprecate the apc driver
Diffstat (limited to 'user_guide_src')
-rw-r--r--user_guide_src/source/changelog.rst5
1 files changed, 5 insertions, 0 deletions
diff --git a/user_guide_src/source/changelog.rst b/user_guide_src/source/changelog.rst
index 055e2d08c..dcfe7b481 100644
--- a/user_guide_src/source/changelog.rst
+++ b/user_guide_src/source/changelog.rst
@@ -7,8 +7,13 @@ Version 3.1.6
Release Date: Not Released
+- **Security**
+
+ - Fixed a potential object injection in :doc:`Cache Library <libraries/caching>` 'apc' driver when ``save()`` is used with ``$raw = TRUE`` (thanks to Tomas Bortoli).
+
- General Changes
+ - Deprecated :doc:`Cache Library Library <libraries/caching>` driver 'apc'.
- Updated the :doc:`Session Library <libraries/sessions>` 'redis', 'memcached' drivers to reduce the potential of a locking race conditions.