oss-security - PHP security fix in 5.2.10

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [month] [year] [list]

Date: Wed, 22 Jul 2009 14:31:47 +0200
From: Tomas Hoger <thoger@...hat.com>
To: OSS Security <oss-security@...ts.openwall.com>
Subject: PHP security fix in 5.2.10

Hi!

PHP 5.2.10 was release a while ago, fixing one minor buffer over-read
issue in exif reading.  Does this already have a CVE that I've missed?

http://www.php.net/releases/5_2_10.php
http://secunia.com/advisories/35441/
http://www.vupen.com/english/advisories/2009/1632

-- 
Tomas Hoger / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.