[0x721427d8@gmail.com: [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation]

Felipe Pena felipensp at gmail.com
Tue Jun 12 17:55:18 UTC 2012


Hi,

2012/6/12 Jason Hellenthal <jhellenthal at dataix.net>:
[...]
>
> Timeline:
> ---------
> * 2012 Feb   - Discovered in 5.3.8, verified for 5.3.0/5.3.10 and 5.4.0
> * 2012 March - Responsible Disclosure via SSD/BeyondSecurity
> * 2012 April - Patch available 2012-04-19
> * 2012 May/June - No trace of bugfix in svn for 5.3/5.4/trunk although
> mentioned in bugref #61755
> * 2012 June  - No trace of bugfix in svn for 5.3/5.4/trunk, code ...
> * 2012 June  - public disclosure
>

No trace of bugfix in June? It has been fixed in Apr.

http://git.php.net/?p=php-src.git;a=commitdiff;h=1b78aef426a8f413ddd70854eb3fd5fbc95ef675

-- 
Regards,
Felipe Pena


More information about the freebsd-ports mailing list