#45408 [Asn->Csd]: bundled version of libpcre misses security fix for CVE-2008-2371
| From: | nlopess@php.net | Date: | Sun, 06 Jul 2008 15:24:26 +0000 |
| Subject: | #45408 [Asn->Csd]: bundled version of libpcre misses security fix for CVE-2008-2371 | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-126320@lists.php.net to get a copy of this message | ||
ID: 45408
Updated by: nlopess@php.net
Reported By: hoffie at gentoo dot org
-Status: Assigned
+Status: Closed
Bug Type: PCRE related
Operating System: Irrelevant
PHP Version: 5.2.6
Assigned To: nlopess
New Comment:
patch applied, thanks!
Previous Comments:
------------------------------------------------------------------------
[2008-07-01 18:46:13] hoffie at gentoo dot org
Description:
------------
The bundled version of libpcre misses the security fix for
CVE-2008-2371.
See http://bugs.gentoo.org/show_bug.cgi?id=228091
for details
(including a patch).
http://overlays.gentoo.org/proj/php/browser/patches/php-patches/5.2.6/5.2.6/012_pcre-integer-overflow.patch
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=45408&edit=1