Re: Cases Where Bash Shellshock Does Not Apply (mod_php, php-fpm )
| From: | Peter Lind | Date: | Fri, 26 Sep 2014 10:59:07 +0000 |
| Subject: | Re: Cases Where Bash Shellshock Does Not Apply (mod_php, php-fpm ) | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-77661@lists.php.net to get a copy of this message | ||
On 26 September 2014 12:48, Andrea Faulds <ajf@ajf.me> wrote:
>
> On 26 Sep 2014, at 11:46, marius adrian popa <mapopa@gmail.com> wrote:
>
> > Maybe we need an official stance about shellshock
>
> Do we? As I understand it, this isn’t a PHP-level vulnerability, and I’m
> not sure there’s much we can reasonably do about it. Similarly to the
> Heartbleed bug, control is not in our hands here.
>
>
Informing people about the cases where they *might* be at risk when running
PHP doesn't seem a bad idea. Even though PHP itself is not at fault.
> --
> Andrea Faulds
> http://ajf.me/
>
>
>
>
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
--
<hype>
WWW: plphp.dk / plind.dk
CV: careers.stackoverflow.com/peterlind
LinkedIn: plind
Twitter: kafe15
</hype>