[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: php5: many of the "open unimportant issues" would seem to be fixed?



Hi,
* Chris Butler <chrisb@debian.org> [2012-04-23 14:51]:
> Having a quick look at the security tracker for PHP5, it looks to me like a
> number of the older "Open unimportant issues" are no longer a problem with
> the latest version in Squeeze (5.3.3-7), since a lot of them seem to have
> been fixed upstream in earlier versions. Can the tracker be updated somehow
> to remove the noise from old issues?
> 
> >From a quick scan, it seems that CVE-2010-3064 is a likely cut-off point, as
> it seems to be the last one listed as affecting "PHP 5.3 through 5.3.2".
> Although I'm a little bit busy right at the moment, I can probably have a
> more detailed look through the list later today when I have a bit more spare
> time, if that would help.

What is this exactly based on? Cause the CVE id description is unfortunately 
not very reliable.

Kind regards
Nico
-- 
Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpPhMMnV4yoH.pgp
Description: PGP signature


Reply to: