oss-security - Re: Month of PHP Security 2010 Issues

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20100511091917.GA26117@inutil.org>
Date: Tue, 11 May 2010 11:19:17 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: Month of PHP Security 2010 Issues

On Tue, May 11, 2010 at 12:08:28PM +0300, Eren Türkay wrote:
> > MOPS-2010-001: PHP hash_update_file() Already Freed Resource Access
> > Vulnerability - http://bit.ly/aZDRha
> 
> Not assigned yet

Since MOPS-2010-001 is about the fact that MOPB-28-2007 is still
unfixed in current PHP, the CVE ID from MOPB-28-2007 still
applies: CVE-2007-1581

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.