Re: [pcre-dev] CVE-2008-2371

Page principale
Supprimer ce message
Auteur: Nuno Lopes
Date:  
À: pcre-dev
Sujet: Re: [pcre-dev] CVE-2008-2371
Ok, thank you.
In the mean time, can I apply his patch to PHP's bundled PCRE? Is the patch
ok?

Thanks,
Nuno

----- Original Message -----
> On Thu, 3 Jul 2008, Nuno Lopes wrote:
>
>> Are you aware of CVE-2008-2371 (proposed patch at
>> http://bugs.gentoo.org/228091)?
>> Looks like a serious problem.
>
> Yes, I'm aware. Tavis mailed me a while back. I've just started work on
> PCRE and will include his patch in the next release, which I expect to
> come out sometime in August.
>
> Philip
>
> --
> Philip Hazel