[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Security update for php5 (sarge backports)



Jan Wagner uploaded uploaded a security update for the php5 packages in sarge
backports which fixes the following issues: 

CVE-2007-1399
    Stefan Esser discovered that a buffer overflow in the zip extension
    allows the execution of arbitrary code.

CVE-2007-1864
    It was discovered that a buffer overflow in the xmlrpc extension
    allows the execution of arbitrary code.

For the sarge-backports distribution these problems have been fixed in version
5.2.0-8+etch7po.1.

Alex

Attachment: signature.asc
Description: Digital signature


Reply to: