add news for SOAP fixes

smalyshev · smalyshev · commit 7ffb77d24389 · 2013-02-26T22:20:21.000-08:00
diff --git a/NEWS b/NEWS
@@ -23,6 +23,11 @@ PHP                                                                        NEWS
   . Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
     (Johannes)
 
+- SOAP
+  . Added check that soap.wsdl_cache_dir conforms to open_basedir
+    (CVE-2013-1635). (Dmitry)
+  . Disabled external entities loading (CVE-2013-1643). (Dmitry)
+
 - SPL:
   . Fixed bug #64264 (SPLFixedArray toArray problem). (Laruence)
   . Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
