[Stable] [SECURITY] programming/languages/php/php

Gökçen Eraslan gokcen at pardus.org.tr
3 Mar 2010 Çar 09:57:06 EET


Version bump to fix 3 security vulnerabilities (#11363)

- Fixed safe_mode validation inside tempnam() when the directory path does not 
end with a /). (Martin Jansen)
- Fixed a possible open_basedir/safe_mode bypass in session extension 
identified by Grzegorz Stachowiak. (Ilia)
- Improved LCG entropy. (Rasmus, Samy Kamkar)

Eren can you specify Q and S values for this update?

-- 
Gökçen Eraslan
-------------- sonraki bölüm --------------
A non-text attachment was scrubbed...
Name: kullanılamıyor
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://liste.pardus.org.tr/stable/attachments/20100303/0169ec0c/attachment.pgp>


Stable mesaj listesiyle ilgili daha fazla bilgi