bugtraq - Re: SecurityReason : PHP 5.2.6 dba

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <DL5tOxkrW0n9ovGfT03KXUCfCn4@kjaK+/sQ5DW5981v71UogZJPf/0>
Date: Sat, 6 Dec 2008 20:48:05 +0300
From: Eygene Ryabinkin <rea-sec@...elabs.ru>
To: Ilia Alshanetsky <ilia@...host.org>
Cc: Maksymilian Arciemowicz <cxib@...urityreason.com>,
	bugtraq@...urityfocus.com
Subject: Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file

Ilia, good day.

Sat, Dec 06, 2008 at 10:00:14AM -0500, Ilia Alshanetsky wrote:
> The PHP 4.X tree has been discontinued and all users should upgrade to  
> the 5.x tree.

Ah, I see -- it is even written in red on the official site.  Thanks for
clarifications.

But still, as some vendors are providing 4.x, may be advisory should
mention it as well?

Thanks.
-- 
Eygene