Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[solved]PHP 32 bit float bug
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
huuan
Apprentice
Apprentice


Joined: 19 Feb 2007
Posts: 265
Location: California

PostPosted: Thu Jan 13, 2011 7:51 pm    Post subject: [solved]PHP 32 bit float bug Reply with quote

I see this bug for PHP
http://bugs.php.net/bug.php?id=53632
which would appear to be able to cause a remote DoS on PHP < 5.3.4 at least on 5.3.3-pl3-gentoo it hangs.
so I am wondering why there is no GLSA for this given that 5.3.5 seems stable in portage for x86?
but maybe I missed it somewhere..


Last edited by huuan on Fri Jan 14, 2011 4:26 pm; edited 1 time in total
Back to top
View user's profile Send private message
tomk
Bodhisattva
Bodhisattva


Joined: 23 Sep 2003
Posts: 7221
Location: Sat in front of my computer

PostPosted: Fri Jan 14, 2011 9:47 am    Post subject: Reply with quote

This is being dealt with in bug 350908, once it has been stabilised on all arches a GLSA will be issued.
_________________
Search | Read | Answer | Report | Strip
Back to top
View user's profile Send private message
phajdan.jr
Retired Dev
Retired Dev


Joined: 23 Mar 2006
Posts: 1777
Location: Poland

PostPosted: Fri Jan 14, 2011 11:22 am    Post subject: Re: PHP 32 bit float bug Reply with quote

huuan wrote:
so I am wondering why there is no GLSA


http://www.gentoo.org/security/en/vulnerability-policy.xml requires a GLSA for all A3-rated vulnerabilities, so a GLSA will eventually be issued. However, there is a huge backlog of GLSAs so it's not necessarily going to be released on time.

Anyway, the same vulnerability treatment policy gives us 10 days from the initial bug report to release the GLSA. The bug was filed on January 6th, so there are about two more days in the limit.
_________________
http://phajdan-jr.blogspot.com/
Back to top
View user's profile Send private message
huuan
Apprentice
Apprentice


Joined: 19 Feb 2007
Posts: 265
Location: California

PostPosted: Fri Jan 14, 2011 4:25 pm    Post subject: Reply with quote

Thanks.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum