php pack() security update

[Benjamin J. Weiss]

Jim van Wel wrote:

>Hi there,
>
>My question is the same. I hear no one here about this matter. Please
>respond!
>
>It's stupid, but the bug is known here right?
>
>  
>
<snip>

Until a patch comes out, I'd move/rename /etc/httpd/conf.d/php.conf and 
restart the httpd service...thereby removing php capability, but 
protecting yourself from compromise.  At least until RH releases an update.

Ben