Re: php4 vulnerability - is potato affected?

[Matt Zimmerman <mdz@debian.org>]

On Thu, Jul 17, 2003 at 12:41:21PM +0200, Robert Varga wrote:

> Are potato php4 packages (4.0.3pl1-0potato4) affected by the sechole 
> warned about in the recent DSA-351-1?
> 
> If they are, will there be fixes for potato as well, or should we upgrade
> to woody?

potato is no longer supported for security fixes since June 30th, 2003.  I
have not investigated whether this bug is present in 4.0.3pl1-0potato4.

See the following pages for more information:

http://www.debian.org/releases/potato/

http://lists.debian.org/debian-devel-announce/2003/debian-devel-announce-200302/msg00010.html

Yes, you should upgrade to woody.

-- 
 - mdz