[gentoo-user] PHP and glsa

[gentoo-user] PHP and glsa

[A. Khattri]

glas-check shows that PHP on one of my servers is vulnerable but in 
examining the GLSA and comparing my version against it I see I am running 
a version that is unaffected by this GLSA - so do I need to tell GLSA to 
ignore that package or is there something else Ive missed?

root# glsa-check -l | egrep '\[N\]'
[A] means this GLSA was already applied,
[U] means the system is not affected and
[N] indicates that the system might be affected.

200705-19 [N] PHP: Multiple vulnerabilities ( dev-lang/php )
200708-10 [N] MySQL: Denial of Service and information leakage ( 
dev-db/mysql )

root # glsa-check -d 200705-19 | grep Unaffected
Unaffected:        >=~4.4.7 >=5.2.2

root# eix ^php$
[I] dev-lang/php
      Available versions:
         (4)     4.4.7 4.4.8_pre20070816
         (5)     [m]5.1.6-r11 [m]5.2.2-r1 [m]5.2.3-r3 [m]5.2.4_pre200708051230-r2
      Installed versions:  4.4.8_pre20070816(4)(16:56:39 08/28/07)
      Description:         The PHP language runtime engine: CLI, CGI and Apache2 SAPIs.


Huh?

-- 
A
-- 
gentoo-user@gentoo.org mailing list