security

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
security [2016/11/11 13:16]
krakjoe
security [2021/07/12 15:28] (current)
cmb open_basedir bypasses are no security issues
Line 3: Line 3:
    * Authors: Release Managers    * Authors: Release Managers
    * Date: November 2016    * Date: November 2016
-   * Version: 1.0.0+   * Version: 1.0.1
    * RFC: [[rfc:security-classification|Security Issue Classification]]    * RFC: [[rfc:security-classification|Security Issue Classification]]
  
Line 75: Line 75:
   * requires the use of settings not recommended for production - ex. error reporting to output   * requires the use of settings not recommended for production - ex. error reporting to output
   * requires the use of non-standard environment variables - ex. USE_ZEND_ALLOC   * requires the use of non-standard environment variables - ex. USE_ZEND_ALLOC
-  * requires the use of non-standard builds+  * requires the use of non-standard builds - ex. obscure embedded platform, not commonly used compiler
   * requires the use of code or settings known to be insecure   * requires the use of code or settings known to be insecure
 +  * requires the use of FFI
 +  * requires an open_basedir bypass
 +
  
 ====== Handling issues ====== ====== Handling issues ======
security.1478870167.txt.gz · Last modified: 2017/09/22 13:28 (external edit)