#45408 [Opn->Asn]: bundled version of libpcre misses security fix for CVE-2008-2371
| From: | johannes@php.net | Date: | Tue, 01 Jul 2008 22:11:41 +0000 |
| Subject: | #45408 [Opn->Asn]: bundled version of libpcre misses security fix for CVE-2008-2371 | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-126167@lists.php.net to get a copy of this message | ||
ID: 45408
Updated by: johannes@php.net
Reported By: hoffie at gentoo dot org
-Status: Open
+Status: Assigned
Bug Type: PCRE related
Operating System: Irrelevant
PHP Version: 5.2.6
Assigned To: nlopess
Previous Comments:
------------------------------------------------------------------------
[2008-07-01 18:46:13] hoffie at gentoo dot org
Description:
------------
The bundled version of libpcre misses the security fix for
CVE-2008-2371.
See http://bugs.gentoo.org/show_bug.cgi?id=228091
for details
(including a patch).
http://overlays.gentoo.org/proj/php/browser/patches/php-patches/5.2.6/5.2.6/012_pcre-integer-overflow.patch
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=45408&edit=1