Re: [APC-DEV] 3.0.17
[email protected] (Rasmus Lerdorf) Tue, 25 Mar 2008 03:09:27 -0700
| Newsgroups | php.apc.dev |
|---|---|
| Message-ID | <[email protected]> |
Ok, packaging up 3.0.17 now. I should have been paying more attention to strcpy-related issues. The patch that caused this was: http://cvs.php.net/viewvc.cgi/pecl/apc/apc.c?sortby=date&view=diff&r1=3.12&r2=3.13 Just remember to always use strlcpy instead of strcpy. Grepping through the code there are no other strcpy() calls, so I think we are ok now. -Rasmus Brian Shire wrote: > > Nothing from me.... > > Thanks, > > -shire > > On Mar 24, 2008, at 10:45 PM, Rasmus Lerdorf wrote: >> Anyone have anything they want to squeeze into 3.0.17? >> We need a quick release to address CVE-2008-1488 >> >> -Rasmus >> >> -- >> APC Development Mailing List (http://pecl.php.net/APC) >> To unsubscribe, visit: http://www.php.net/unsub.php >>