[php-maint] Bug#450581: Bug#450581: libapache2-mod-php5: ob_start (with gzhandler?) takes 100% mem+swap within a few seconds

[Ondřej Surý]

> Yeah, my admin tried a bunch of those methods; the machines went down 
> every time.  But that might have been a config issue; it makes php
> unusable at any rate as I can DOS any server running php5 now. 

I am sure that running php as fastcgi in ulimited environment will help.

Fact that libapache2-mod-php5 is unsafe in shared environment is unsafe
was true even before this bug.

Ondrej.
-- 
Ondřej Surý <ondrej at sury.org>  ***  http://blog.rfc1925.org/
Kulturní občasník              ***  http://www.obcasnik.cz/
Nehoupat, prosím               ***  http://nehoupat.blogspot.com/