Re: [Fwd: (SRADV00001) Arbitrary file disclosure ...
| From: | Billy dot Harvey at RhinoComputing dot com | Date: | Mon, 04 Sep 2000 16:16:00 +0000 |
| Subject: | Re: [Fwd: (SRADV00001) Arbitrary file disclosure ... | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-15150@lists.php.net to get a copy of this message | ||
Rasmus Lerdorf writes:
> > There will be a series of advisories along the lines of this one...
>
> Please run any future security issues like this by php-dev@lists.php.net
> before posting them to bugtraq.
I second that request. The developers may in some cases be able to
quickly repair or at least offer a workaround for security problems.
If the developers are unwilling or unable to make a fix quickly, then
yes, the community needs to know of the security implications, but to
post the bugs without giving the developers that first-look
potentially harms all of us.
Billy