[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi From: Andi Gutmans (andi <email protected>)
Date: 03/21/01

Why do we need to have an interrogation. Relax, it's not such a big deal.

4.0.4pl1 & 4.0.3pl1 both had security fixes (Apache config handling was a
security issue).

Anyway, I still don't understand what the big fuss is about. Let's stop
arguing about this like 4th graders.
By the way, the error_reporting() pl1 in 4.0.1 was due to a bug which was
in the CVS a looooong time. It was not a spontaneous bug that was introduced.

Andi

At 07:50 PM 3/21/2001 +0100, Sascha Schumann wrote:
>On Wed, 21 Mar 2001, Andi Gutmans wrote:
>
> > A couple of these were buffer overflows IIRC which were security issues.
> > Remember the group@ emails about those?
>
> Fixes against format-string attacks and for file-upload
> issues went into 4.0.3. Or what are you referring to?
>
> - Sascha Experience IRCG
> http://schumann.cx/ http://schumann.cx/ircg 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>