[imp] PHP security update breaks IMP

[Chuck Hagenbuch]

Quoting Thomas Gebhardt <gebhardt@HRZ.Uni-Marburg.DE>:

> When upgrading from PHP 3.0.16 to PHP 3.0.17 (which fixes the
> recently found format string security bug) I found that I cannot
> send attachments any more (the apache error log mentions a
> segfault when I try to upload an attachment). Downgrading
> to PHP 3.0.16 fixes the flaw.

Unfortunately, 3.0.17 is broken - it's nothing to do with IMP, except that we
happen to hit the broken functionality. The PHP folks know about it, and
hopefully. 3.0.18 will be out soon.

-chuck

--
Charles Hagenbuch, <chuck@horde.org>
Many states consider gambling so immoral that they not only prohibit private
gambling organizations, they thoughtfully provide their own.