[PHP] Re: rfc822_write_address() / CVE-2008-2829 problem

2008-07-07 Thread M. Sokolewicz
Matt Graham wrote: From: "M. Sokolewicz" <[EMAIL PROTECTED]> Matt Graham wrote: PHP had potential vulnerability CVE-2008-2829 http://bugs.php.net/bug.php?id=42862 for a reasonable discussion and an (unofficial) patch. I'm just curious as to what other PHP users are doing about the problem, sin

[PHP] Re: rfc822_write_address() / CVE-2008-2829 problem

2008-07-07 Thread Shawn McKenzie
Matt Graham wrote: From: "M. Sokolewicz" <[EMAIL PROTECTED]> Matt Graham wrote: PHP had potential vulnerability CVE-2008-2829 http://bugs.php.net/bug.php?id=42862 for a reasonable discussion and an (unofficial) patch. I'm just curious as to what other PHP users are doing about the problem, sin

[PHP] Re: rfc822_write_address() / CVE-2008-2829 problem

2008-07-07 Thread Matt Graham
From: "M. Sokolewicz" <[EMAIL PROTECTED]> > Matt Graham wrote: >> PHP had potential vulnerability CVE-2008-2829 >> http://bugs.php.net/bug.php?id=42862 for a reasonable discussion and >> an (unofficial) patch. >> >> I'm just curious as to what other PHP users are doing about the problem, >> since

[PHP] Re: rfc822_write_address() / CVE-2008-2829 problem

2008-07-07 Thread M. Sokolewicz
Matt Graham wrote: Hello, list. A few days ago, a security scan said that our machines that were running PHP had potential vulnerability CVE-2008-2829 , a buffer overflow in rfc822_write_address(). Discussions about this are relatively easy to find with Google, but check out http://bugs.php.n