oss-sec mailing list archives

Re: CVE request: PHP MOPS-2010-56..60


From: Pierre Joye <pierre.php () gmail com>
Date: Tue, 24 Aug 2010 11:34:42 +0200

hi,

On Tue, Aug 24, 2010 at 9:40 AM, Thomas Biege <thomas () suse de> wrote:
Am Freitag, 20. August 2010, 18:45:47 schrieb Pierre Joye:
..
I miss that part, thanks for pointing me to it. I will commit a fix
later today.

Done: http://svn.php.net/viewvc?view=revision&revision=302565

Does it need a new CVE-ID?

--
 Thomas Biege <thomas () suse de>, SUSE LINUX, Security Support & Auditing
 SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)


Not sure as #24 was never fixed, but I don't know what is the policy
in this case. I can use CVE-2010-2094 or a new one if it is more
appropriate or cleaner.

Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org


Current thread: