]> granicus.if.org Git - php/commit
Bump libxml version requirement 2.7.6 => 2.9.0
authorDik Takken <d.h.j.takken@freedom.nl>
Thu, 16 Jul 2020 12:19:40 +0000 (14:19 +0200)
committerNikita Popov <nikita.ppv@gmail.com>
Mon, 3 Aug 2020 19:51:10 +0000 (21:51 +0200)
commit691a09f291a909cba8821ef16a447a5e615dee69
tree0419088687170f2e22b1bd56b39cea705ed4e7eb
parent44c7128fb726696a7c23ff694d1077cf0cf435d4
Bump libxml version requirement 2.7.6 => 2.9.0

Since libxml version 2.9.0 external entity loading is disabled by default.
Bumping the version requirement means that XML processing in PHP is no
longer vulnerable to XXE processing attacks by default.
UPGRADING
build/php.m4
ext/libxml/tests/bug54138_1.phpt [deleted file]
ext/libxml/tests/libxml_entity_loading_disabled_by_default.phpt [new file with mode: 0644]