[php-maint] Crypt in PHP 5.3.7

Ondřej Surý ondrej at debian.org
Sun Aug 21 21:24:12 UTC 2011

Hi Lior,

thanks for heads up, fortunately I have some good news. Ccing Debian
Security Team as well.

Debian's PHP is fine, because it does use system crypt() implementation
for available ciphers and uses PHP implementation only for algorithms
not implemented in the system library (e.g. blowfish).

Stable with php5-cli 5.3.7-1:
# php -r 'printf("MD5: %s\n", crypt("password", "\$1\$U7AjYB.O$"));'
MD5: $1$U7AjYB.O$L1N7ux7twaMIMw0En8UUR1


On Sun, Aug 21, 2011 at 21:50, Lior Kaplan <kaplanlior at gmail.com> wrote:
> Hi Guys,
> Are you aware of this issue in 5.3.7 final release?
> https://bugs.php.net/bug.php?id=55439
> I guess we should provide the patch already in in php.net, see
> http://svn.php.net/viewvc/?view=revision&revision=315218
> Kaplan
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint

Ondřej Surý <ondrej at sury.org>

More information about the pkg-php-maint mailing list