On 2016-08-23 19:56, Thorsten Alteholz wrote:
Hi Jan,
Hi Thorsten,
do you know whether there has been a CVE assigned for these bugs already? As far as I can see there is none yet.
Nope, not a clue. All I have to go by is PHP's security announcement (http://php.net/releases/5_6_25.php) and the bugtracker, which makes it a bit of a hassle to figure out what applies to 5.4 (or 5.5, which is my real interest) or not.
Anyway, I plan to upload a new version in the next few days and I can add patches for these bugs as well ...
I think there may be other candidate patches as well, I haven't had the tuits to check thoroughly:
http://www.php.net/ChangeLog-5.php#5.6.25 Thanks to both you and Roberto for responding so quickly! -- Cheers, Jan