Re: PCI vulnerability scan - PHP4 on Sarge

The pcre patches mention fixes to the library and to python2.1, 2.2 and 2.3, but not php4.

    bc

Florian Weimer wrote:
> * William Chipman:
>
>
>> We had a scan of our systems for PCI compliance and received warnings
>> about PHP 4.4.3-10-22.
>> I checked the archives and found that the following CVE reports were
>> not covered by the comments
>> leading up to 4.4.3-10-22:
>>
>
>
>> 2005-2491
>>
>
> Do you mean CVE-2005-2491? This should have been fixed by a PCRE
> upgrade.
>
> What's your audit methodology?
>
>
>

-- 
William D. Chipman
Infrastructure Manager
JSA Technologies, Inc.
201 Main Street, Suite 1320
Fort Worth, Tx. 76102

817-810-2204



-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org