[PHP] rfc822_write_address() / CVE-2008-2829 problem

["Matt Graham" <danceswithcrows@xxxxxxx>]

Hello, list.  A few days ago, a security scan said that our machines 
that were running PHP had potential vulnerability CVE-2008-2829 , a
buffer overflow in rfc822_write_address().  Discussions about this 
are relatively easy to find with Google, but check out
http://bugs.php.net/bug.php?id=42862 for a reasonable discussion and
an (unofficial) patch.

I'm just curious as to what other PHP users are doing about the problem,
since Redhat says "meh" even though the company doing the security
scan says "OMG PANIC!!1!"  Let me know what you guys think.  Thanks,

-- 
The Crow202 Blog:  http://crow202.org/wordpress/
There is no Darkness in Eternity/But only Light too dim for us to see



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php