oss-sec mailing list archives

Re: Month of PHP Security 2010 Issues

From: Moritz Muehlenhoff <jmm () debian org>
Date: Tue, 11 May 2010 11:19:17 +0200

On Tue, May 11, 2010 at 12:08:28PM +0300, Eren Türkay wrote:

MOPS-2010-001: PHP hash_update_file() Already Freed Resource Access
Vulnerability - http://bit.ly/aZDRha


Not assigned yet


Since MOPS-2010-001 is about the fact that MOPB-28-2007 is still
unfixed in current PHP, the CVE ID from MOPB-28-2007 still
applies: CVE-2007-1581

Cheers,
        Moritz

Current thread:

Month of PHP Security 2010 Issues Eren Türkay (May 11)
- Re: Month of PHP Security 2010 Issues Moritz Muehlenhoff (May 11)
- Re: Month of PHP Security 2010 Issues Steven M. Christey (May 11)