Re: Bug 62479
Hi Stas,
I see no comments from you. The only response I've seen from you was
your asking me if the patch was ready (in comments on the bug). Can you
please elaborate?
This isn't technically a security issue, but the bug was reported on
5.3, and affects 5.3. If this is an issue, I can revert the 5.3 change,
but this was a miscommunication between Iliaa and myself. We both
originally had patches, and they ended up getting combined.
On Sat, Jan 18, 2014, at 05:45 PM, Stas Malyshev wrote:
> Hi!
>
> > If no one objects, I plan on merging
> > https://github.com/willfitch/php-src/commit/06170d344f6b3148d505afd8ae952d3439de9005
> > to 5.3 and up later tonight. This bug has been out there for a long
> > time.
>
> I see my comments on the patch were ignored. Could you explain what
> happens if the password is, for example, 'foo? From the patch, it looks
> like it would be placed there as-is. Is this the correct behavior?
>
> Also, it this a security issue? Because 5.3 is security fixes only.
> --
> Stanislav Malyshev, Software Architect
> SugarCRM: http://www.sugarcrm.com/
> (408)454-6900 ext. 227
Thread (12 messages)