26 Mar
2008
26 Mar
'08
11:09 p.m.
Am Mittwoch, 26. März 2008 23:17:30 schrieb Aaron Griffin:
On Wed, Mar 26, 2008 at 5:00 PM, Pierre Schmitz <pierre@archlinux.de> wrote:
I have downgraded APC and added a backport of the CVE-2008-1488 patch. Please make sure to use php-apc-3.0.16-4.
Weird, this isn't fixed/patchable in 3.0.17? Or is it too recent to tell?
3.0.17 is not fixed yet; it was released at 25.3. I know that going back and forth is not ideal, but this was the best and fastest way to fix the problem. We'll have to wait for an upstream update. (might take a while because the crash is not that easy to reproduce) -- archlinux.de