Sebastian Bergmann wrote: > Zeev Suraski schrieb: > >>If there are no stoppers I'd like to release it towards the end of the >>week. > > > Maybe the bundled PCRE should be updated: > http://www.securitytracker.com/alerts/2005/Aug/1014744.html
Yes, and the whole reason for this release is to stop distributing a vulnerable version of XML_RPC. The version in the tarball is 1.3.1 and we want 1.4.0. -Rasmus -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php