Ubuntu
php4 package

  1. Bug #11223
  2. Comment #5

Comment 5 for bug 11223

Revision history for this message
In , kryps (krypsilon) wrote : [PATCH,RFC] Backport of PHP 4.3.9 security fixes: pack()/unpack()

Hi!

I am not a Debian developer but we use Woody on our servers. The
latest PHP security holes affect us as well. I have backported the
security fix for the pack()/unpack() functions (attached).

Attached patch is against PHP 4.1.2-7. PHP 4.1.2-7+patch builds fine
in a Woody pbuilder and looks ok but I have not yet otherwise tested
it.

Comments? Should I try to backport the other security fixes as well?

Regards,

Hans
--
Hans Kratz