Re: Heads up: PHP exploit

2002-03-01 Thread David Talkington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ed Wilts wrote: >Red Hat has already issued updates and I *strongly* recommend that people >use Red Hat's version rather than yours. No offense intended, but as a >distributor of php, this is Red Hat's job. And pretty good response time (~30 hours)

RE: Heads up: PHP exploit

2002-03-01 Thread Chris Mason
Sent: Friday, March 01, 2002 8:47 AM To: [EMAIL PROTECTED] Subject: Re: Heads up: PHP exploit Red Hat has already issued updates and I *strongly* recommend that people use Red Hat's version rather than yours. No offense intended, but as a distributor of php, this is Red Hat's job.

Re: Heads up: PHP exploit

2002-03-01 Thread Ed Wilts
- From: "Chris Mason" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 01, 2002 6:37 AM Subject: Re: Heads up: PHP exploit > I can build patched rpm's if anyone needs them, let me know what > versions you need and I will build them. I have patched my ow

Re: Heads up: PHP exploit

2002-03-01 Thread Chris Mason
I can build patched rpm's if anyone needs them, let me know what versions you need and I will build them. I have patched my own rpm but it's a mod_php4 rpm which might not suit everyone. Chris On Wed, 2002-02-27 at 18:55, David Talkington wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: S

Re: Heads up: PHP exploit

2002-02-27 Thread Ed Wilts
The fix shows patches for releases other than what Red Hat currently supports for 7.1 which is 4.0.4p11-9. Whether or not this release is vulnerable I guess needs to be verified, and if the current release has a security fix, I expect that Red Hat will ship an update soon. Keep your eyes open an