diff options
| author |   Thomas Deutschmann <whissi@gentoo.org> | 2017-09-28 22:54:55 +0200 |
|---|---|---|
| committer | Thomas Deutschmann <whissi@gentoo.org> | 2017-09-28 22:54:55 +0200 |
| commit | 612f47deca97e8d7ffc2100c1dbc82a602abdf39 (patch) | |
| tree | 714d18b438413833e38a20af15b6514bb8c7ac61 /glsa-200402-01.xml | |
| parent | Fix GLSA 201709-27 to reflect previous canonical name for libTIFF (diff) | |
| download | glsa-612f47deca97e8d7ffc2100c1dbc82a602abdf39.tar.gz glsa-612f47deca97e8d7ffc2100c1dbc82a602abdf39.tar.bz2 glsa-612f47deca97e8d7ffc2100c1dbc82a602abdf39.zip | |
GLSA format update
- Dates converted to ISO8601 [Bug #196681]
- Reference links changed to HTTPS where available [Bug #630750]
See: https://bugs.gentoo.org/196681
See: https://bugs.gentoo.org/630750
Diffstat (limited to 'glsa-200402-01.xml')
| -rw-r--r-- | glsa-200402-01.xml | 25 |
1 files changed, 12 insertions, 13 deletions
diff --git a/glsa-200402-01.xml b/glsa-200402-01.xml index 827e1220..92d65863 100644 --- a/glsa-200402-01.xml +++ b/glsa-200402-01.xml @@ -1,19 +1,18 @@ <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd"> - <glsa id="200402-01"> <title>PHP setting leaks from .htaccess files on virtual hosts</title> <synopsis> - If the server configuration "php.ini" file has - "register_globals = on" and a request is made to one virtual host - (which has "php_admin_flag register_globals off") and the next + If the server configuration "php.ini" file has + "register_globals = on" and a request is made to one virtual host + (which has "php_admin_flag register_globals off") and the next request is sent to the another virtual host (which does not have the setting) global variables may leak and may be used to exploit the site. </synopsis> <product type="ebuild">PHP</product> - <announced>February 07, 2004</announced> - <revised>February 07, 2004: 01</revised> + <announced>2004-02-07</announced> + <revised>2004-02-07: 01</revised> <bug>39952</bug> <access>remote</access> <affected> @@ -30,9 +29,9 @@ </background> <description> <p> - If the server configuration "php.ini" file has - "register_globals = on" and a request is made to one virtual host - (which has "php_admin_flag register_globals off") and the next + If the server configuration "php.ini" file has + "register_globals = on" and a request is made to one virtual host + (which has "php_admin_flag register_globals off") and the next request is sent to the another virtual host (which does not have the setting) through the same apache child, the setting will persist. </p> @@ -45,7 +44,7 @@ result, users are urged to upgrade their PHP installations. </p> <p> - Gentoo ships PHP with "register_globals" set to "off" + Gentoo ships PHP with "register_globals" set to "off" by default. </p> <p> @@ -64,10 +63,10 @@ </p> <code> # emerge sync - # emerge -pv ">=dev-php/mod_php-4.3.4-r4" - # emerge ">=dev-php/mod_php-4.3.4-r4"</code> + # emerge -pv ">=dev-php/mod_php-4.3.4-r4" + # emerge ">=dev-php/mod_php-4.3.4-r4"</code> </resolution> <references> - <uri link="http://bugs.php.net/bug.php?id=25753">Corresponding PHP bug</uri> + <uri link="https://bugs.php.net/bug.php?id=25753">Corresponding PHP bug</uri> </references> </glsa> |