Ubuntu
php-defaults package

  1. Bug #1990302
  2. Comment #11

Comment 11 for bug 1990302

Revision history for this message
Martin Kucej (mkucej) wrote :

Our servers were updated and this bug is fully mitigated. Thank you so much for working on this!!! Although not a CVE, this bug affects such a commonly used functionality that it needed a backport.

BTW, I would argue this bug should have received a CVE. It's easy to imagine than string(16) "1111111111111111" is some kind of secret.

Thanks again.