Neil McGovern wrote:

> A fairly odd bug. It only affects the app if REGISTER_GLOBALS is on,
> however, the app requires REGISTER_GLOBALS :|

Isn't this in and of itself a problem due to CVE-2005-3390. Is that
finally going to be fixed in Sarge?
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336645 certainly hinted
otherwise.

_______________________________________________
Secure-testing-team mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-team

Reply via email to