On Sat, 2011-01-08 at 16:31 +0100, Julien Cristau wrote: [..] > Did you actually reproduce this with php 5.2.6.dfsg.1-1+lenny9? AFAIK > people tried and couldn't.
As mentioned in my update I couldnt reproduce it, but the 64bit build of php5 seems unaffected, so maybe users with a 32bit install should test it? If I understand the upstream buginfo correctly, both lenny and squeeze current releases (32bit) should be vulnerable to this bug. I'd recommend getting in touch with the people from PHP (Pajoye). Cheers, Jort -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org