rfc822_write_address() / CVE-2008-2829 problem
| From: | Matt Graham | Date: | Mon, 07 Jul 2008 16:37:53 +0000 |
| Subject: | rfc822_write_address() / CVE-2008-2829 problem | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-276377@lists.php.net to get a copy of this message | ||
Hello, list. A few days ago, a security scan said that our machines
that were running PHP had potential vulnerability CVE-2008-2829 , a
buffer overflow in rfc822_write_address(). Discussions about this
are relatively easy to find with Google, but check out
http://bugs.php.net/bug.php?id=42862 for a
reasonable discussion and
an (unofficial) patch.
I'm just curious as to what other PHP users are doing about the problem,
since Redhat says "meh" even though the company doing the security
scan says "OMG PANIC!!1!" Let me know what you guys think. Thanks,
--
The Crow202 Blog: http://crow202.org/wordpress/
There is no Darkness in Eternity/But only Light too dim for us to see