Re: CVE-2007-4840
| From: | Stanislav Malyshev | Date: | Wed, 19 Sep 2007 00:31:22 +0000 |
| Subject: | Re: CVE-2007-4840 | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-32375@lists.php.net to get a copy of this message | ||
ah, so it's a glibc issue then? istr a similar thing come up with truetype fonts that ended up being a bug in the tr1 lib, but because the PoC used php it was classified as a php vulnerabity. if it's the same case here then i think the onus is on glibc...I've just committed a patch for that. -- Stanislav Malyshev, Zend Software Architect stas@zend.com http://www.zend.com/ (408)253-8829 MSN: stas@zend.com