From d11e778994dd09d7a237c0148dcefaa6c56afc43 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Mon, 10 Aug 2015 21:26:27 +0200 Subject: [PATCH] Add note about PHP-FPM release --- admin_manual/installation/source_installation.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/admin_manual/installation/source_installation.rst b/admin_manual/installation/source_installation.rst index 3fb924169..c1bcc708b 100644 --- a/admin_manual/installation/source_installation.rst +++ b/admin_manual/installation/source_installation.rst @@ -277,6 +277,12 @@ ini file. This can be the case, as example, for the ``date.timezone`` setting. Configuration notes to php-fpm ------------------------------ +**Security: Use at least PHP => 5.5.22 or >= 5.6.6,** + +Due to `a bug with security implications `_ +in older PHP releases with the handling of XML data you are highly encouraged to run +at least PHP 5.5.22 or 5.6.6 when in a threaded environment. + **System environment variables** When you are using ``php-fpm``, system environment variables like