Ok, thank you.
In the mean time, can I apply his patch to PHP's bundled PCRE? Is the patch
ok?
Thanks,
Nuno
----- Original Message ----- > On Thu, 3 Jul 2008, Nuno Lopes wrote:
>
>> Are you aware of CVE-2008-2371 (proposed patch at
>> http://bugs.gentoo.org/228091)?
>> Looks like a serious problem.
>
> Yes, I'm aware. Tavis mailed me a while back. I've just started work on
> PCRE and will include his patch in the next release, which I expect to
> come out sometime in August.
>
> Philip
>
> --
> Philip Hazel
