Re: Security e-mail address
| From: | Rasmus Lerdorf | Date: | Fri, 05 Oct 2001 23:54:03 +0000 |
| Subject: | Re: Security e-mail address | ||
| References: | 1 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-6884@lists.php.net to get a copy of this message | ||
use group@php.net please
On Fri, 5 Oct 2001, Flavio Veloso wrote:
> Hi Webmaster.
>
> Is there any mail address that can be used to discuss security issues
> related to PHP?
>
> We know that we could use your bug tracking system to report problems,
> but it doesn't seem appropriate to disclose a security bug before PHP
> developers have a chance to look at it.
>
> We are a Linux and network security research company that lives in
> Brazil. Maybe we have discovered a problem which has some security
> implications. We are not completely sure if it's a bug in PHP (and how
> to solve it, even if it isn't), and would like to share it with the
> PHP people privately.
>
> BTW, sorry to bother you with this, but your mail address was the only
> one I could find on the www.php.net website.
>
>