Re: security patch

http://www.php.net/release_4_3_1.php --Andrew On Tue, 2003-05-27 at 22:01, sauron wrote: > Hi webmaster, > > I know you are not the man who can reply to this (probably the mailing list is more suitable > for this type of mail), but in fact I just have a small question and I lack time to subscribe to ml, > read all reply, and unsubscribe then... ... so sorry for inconvenience. > > I saw that you put a new "security patch" for php 4.3.0 (and probably <= release), > I am an user of php 4.3.0 > (coupled with apache of course), and I am a bugtraq reader. I can't remember any public > issue about > this bug, so I am questionning myself if you don't officialy disclose this bug because an > attacker can't exploit it... and so... Have I to patch my php 4.3.0, or is this bug not really > important ? (something as log apache > child segfault in the worth case).. > > Thanks for reply, and one again sorry for lost time due to this mail. > > Best regard, > > Nicolas Brito -- Andrew Lindeman <alindeman@php.net>