0005102: Mantis requires php 4.1, not 4.0.6 as announced - MantisBT

ID	Project	Category	View Status	Date Submitted	Last Update

0005102	mantisbt	bugtracker	public	2005-01-12 06:33	2006-04-20 06:30

Reporter	polzin	Assigned To	grangeway
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	no change required
Product Version	0.19.2

Summary	0005102: Mantis requires php 4.1, not 4.0.6 as announced
Description	core/email_api.php uses vsprintf, which is in PHP since 4.1. http://manuals.phpforum.de/php/function.vsprintf.php http://www.mantisbt.org/requirements.php Either core/email_api should be changed or the requirements should be updated. Otherwise updating to 0.19.2 might silently break this function on systems with 4.0.6!
Tags	No tags attached.

jferraz 2005-01-12 11:47 reporter ~0008973	We have a critical vulnerability on PHP with all versions up to 4.3.9, the use of any version older than 4.3.10 is extremely discouraged. Although it is a big step, we can use this to raise Mantis requirements.

polzin 2005-01-13 04:09 reporter ~0008995	@jferraz: Is this "critical vulnerability" documented somewhere?

jferraz 2005-01-13 08:38 reporter ~0008997	http://www.php.net/release_4_3_10.php http://secunia.com/advisories/13481/

grangeway 2005-04-22 14:45 reporter ~0009873	vsprintf is included in php_api.

grangeway 2005-04-22 14:45 reporter ~0009874	vsprintf is included in php_api.