[php-maint] Bug#601619: Bug#601619: CVE-2010-3710: DoS in filter_var()

Moritz Muehlenhoff jmm at inutil.org
Thu Oct 28 16:24:11 UTC 2010


On Wed, Oct 27, 2010 at 11:45:21PM +0200, Ond??ej Surý wrote:
> Hi Moritz and Adam,
> 
> I have prepared 5.3.3-3 in the git, but I would like to seek
> debian-release(Adam) advice how to proceed. Adam has unblocked 5.3.3-2
> (with prolonged delay to 15 days)... btw thanks for that ...  so
> should I upload 5.3.3-3 with this fix or wait for 5.3.3-2 to go to
> testing and then upload 5.3.3-3 with urgency=high and request an
> unblock again?

This issue doesn't seem urgent. I would recommend to let 5.3.3-2
with the current age-days and followup with the CVE-2010-3710
after that.

Maybe this would also allow the PHP maintainers to include a final
fix for 546164?

Cheers,
        Moritz





More information about the pkg-php-maint mailing list