Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:77661
Return-Path: <peter.e.lind@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 73438 invoked from network); 26 Sep 2014 10:59:32 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 26 Sep 2014 10:59:32 -0000
Authentication-Results: pb1.pair.com smtp.mail=peter.e.lind@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=peter.e.lind@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.176 as permitted sender)
X-PHP-List-Original-Sender: peter.e.lind@gmail.com
X-Host-Fingerprint: 209.85.217.176 mail-lb0-f176.google.com  
Received: from [209.85.217.176] ([209.85.217.176:61735] helo=mail-lb0-f176.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 26/D8-27411-21745245 for <internals@lists.php.net>; Fri, 26 Sep 2014 06:59:31 -0400
Received: by mail-lb0-f176.google.com with SMTP id w7so9216972lbi.7
        for <internals@lists.php.net>; Fri, 26 Sep 2014 03:59:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :cc:content-type;
        bh=JdE6258KYvhOpGPrsnPpQsP60UjVWwCckPzDCF1vstM=;
        b=rBAQauETNiHxRSS+77xY06pchsFU7guR+fQYHogJO2Y1Z/O66gWvwBRE2zJ3ZHGfgV
         qUyNhlrockSaQPPDumiH+XWUYJDPzhKVVRwzLZvitR93Fxm2wRZ2ZCWd8u5mQrWmti7F
         1ZuW6IX41I3TcqfrtDuuEojee/RNwBR+iL97aFNgt7agCyM488Hi9IldKlA725+5+GeU
         W38Z6MqXlND9s+aXZERx0SSS7rOkLMdKPSTMYBPuOsqx7hgGANUh1YEBKyGgKPAhGmBY
         cFPM+l1czss7L3+dnUTDndNm5gHWu/xAzN/lgwORFe+8J43h6ZQ4FTkKtgTqWe4VTn9u
         xjKg==
X-Received: by 10.152.87.193 with SMTP id ba1mr19759165lab.83.1411729167565;
 Fri, 26 Sep 2014 03:59:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.112.48.107 with HTTP; Fri, 26 Sep 2014 03:59:07 -0700 (PDT)
In-Reply-To: <44AEFF63-5705-44F1-98E6-1958CA0BB95D@ajf.me>
References: <CAPv8svUmNokpqyVr3OCXMbp+q9ZmVnhDStw5dbZxWadLtnuksw@mail.gmail.com>
 <44AEFF63-5705-44F1-98E6-1958CA0BB95D@ajf.me>
Date: Fri, 26 Sep 2014 12:59:07 +0200
Message-ID: <CAEU6NAdnxsjixVzs5fjb205d=dyPvsry3S-_JrfE-VEHO8ToOQ@mail.gmail.com>
To: Andrea Faulds <ajf@ajf.me>
Cc: marius adrian popa <mapopa@gmail.com>, PHP Developers Mailing List <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11c345c28d47740503f5cf6c
Subject: Re: [PHP-DEV] Cases Where Bash Shellshock Does Not Apply (mod_php,
 php-fpm )
From: peter.e.lind@gmail.com (Peter Lind)

--001a11c345c28d47740503f5cf6c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 26 September 2014 12:48, Andrea Faulds <ajf@ajf.me> wrote:

>
> On 26 Sep 2014, at 11:46, marius adrian popa <mapopa@gmail.com> wrote:
>
> > Maybe we need an official stance about shellshock
>
> Do we? As I understand it, this isn=E2=80=99t a PHP-level vulnerability, =
and I=E2=80=99m
> not sure there=E2=80=99s much we can reasonably do about it. Similarly to=
 the
> Heartbleed bug, control is not in our hands here.
>
>
Informing people about the cases where they *might* be at risk when running
PHP doesn't seem a bad idea. Even though PHP itself is not at fault.



> --
> Andrea Faulds
> http://ajf.me/
>
>
>
>
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


--=20
<hype>
WWW: plphp.dk / plind.dk
CV: careers.stackoverflow.com/peterlind
LinkedIn: plind
Twitter: kafe15
</hype>

--001a11c345c28d47740503f5cf6c--