+++ This bug was initially created as a clone of Bug #213543 +++ Stefan Esser told vendor-sec about a buffer overflow in PHP's htmlentities/htmlspecialchars internal routines. These flaws are triggered when handling utf-8 data. The danger in this flaw is that these functions are usually passed user input. The patch for this issue can be found here: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/html.c?r1=1.111.2.2.2.2&r2=1.111.2.2.2.3 -- Additional comment from bressers on 2006-11-02 13:39 EST -- This issue is public: http://secunia.com/advisories/22653/ This issue should also affect FC5
php-5.1.6-1.2 has been pushed for fc5, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report.
php-5.1.6-3.1.fc6 has been pushed for fc6, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report.