On Tue, May 02, 2006 at 10:05:28PM -0700, paul dansing wrote: > Is there some reason this issue is being ignored? What, you people > need to see an exploit before you will even LOOK at it and answer > whether it is vuln?
sorry, but wouldn't it make more sense to ask on a php list whether those versions of php have the vulnerabilities? maybe they are just on the php 5.1.x line? really, the php folks are more to blame for the lack of details, IMO. have you tested Robert's php update and given him feedback? if not, you really have no place to complain. and if you are not satisfied with this, then install php-5.1.3 on your own and be done with it. -- <[EMAIL PROTECTED]>
