Re: CVE-2005-4154 (PEAR installer)
| From: | Pierre-Alain Joye | Date: | Fri, 30 Dec 2005 02:42:21 +0000 |
| Subject: | Re: CVE-2005-4154 (PEAR installer) | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-40856@lists.php.net to get a copy of this message | ||
On Thu, 29 Dec 2005 15:30:27 -0500 (EST)
sbenedict@mandriva.com (Stew Benedict) wrote:
>
> Hi Folks,
>
> I'm reviewing our packages for this issue. Does this only affect
> 1.4.0 - 1.4.2 (with the "channels" feature)?
As stated in the review and in our site
(http://pear.php.net/news/vulnerability.php), it affects all
version prior to 1.4.3.
The last and recommanded (and also bundled in PHP releases) is
1.4.5.
--Pierre