[php-maint] Crypt in PHP 5.3.7

[Ondřej Surý]

Hi Lior,

thanks for heads up, fortunately I have some good news. Ccing Debian
Security Team as well.

Debian's PHP is fine, because it does use system crypt() implementation
for available ciphers and uses PHP implementation only for algorithms
not implemented in the system library (e.g. blowfish).

Stable with php5-cli 5.3.7-1:
# php -r 'printf("MD5: %s\n", crypt("password", "\$1\$U7AjYB.O$"));'
MD5: $1$U7AjYB.O$L1N7ux7twaMIMw0En8UUR1

O.

On Sun, Aug 21, 2011 at 21:50, Lior Kaplan <kaplanlior at gmail.com> wrote:
> Hi Guys,
>
> Are you aware of this issue in 5.3.7 final release?
> https://bugs.php.net/bug.php?id=55439
>
> I guess we should provide the patch already in in php.net, see
> http://svn.php.net/viewvc/?view=revision&revision=315218
>
> Kaplan
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint
>



-- 
Ondřej Surý <ondrej at sury.org>
http://blog.rfc1925.org/