[horde] CERT Advisory CA-2002-21 Vulnerability in PHP

[Jon Parise]

On Tue, Jul 23, 2002 at 01:37:20PM -0700, Ashwin Kotian wrote:

> In view of this advisory from CERT, I've the following concern with 
> regards to my system which is running PHP version 4.1.2 along with the 
> following other packages related to PHP:
> 
> php-mysql-4.1.2-0horde1
> php-pgsql-4.1.2-0horde1
> php-imap-4.1.2-0horde1
> php-ldap-4.1.2-0horde1
> php-4.1.2-0horde1
> 
> Are these versions of PHP & PHP related packages also affected ? And if 
> yes, then are there any available fixes for these affected packages ? Do 
> let me know
 
I don't believe 4.1.2 is vulnerable; only 4.2.0 and 4.2.1.

-- 
Jon Parise (jon at horde.org) :: The Horde Project (http://horde.org/)