[SM-Discuss] Re: [SM-Security] SECURITY UPDATE for php-pear/php4

Thomas HOUSSIN thomas.houssin at gmail.com
Thu Dec 16 09:02:17 EST 2004


Hi, 

I don't know if this is specific to my box, but casting php4 from test
fails for me ; the sedit in FINAL seems to be responsible for this (it
works without it).  You can have a look in the compile file attached.

Thomas

On Wed, 15 Dec 2004 16:26:20 -0800 (PST), Eric Sandall <eric at sandall.us> wrote:
> (copied and modified from Seth's e-mail ;))
> 
> php-hardended found a number of major security flaws used in common
> software such that everybody needs an update.
> 
> No exploits yet, but it won't take long to find them, remote, yes.
> 
> 2004-12-15 Eric Sandall <eric at sandall.us>
>         * DETAILS: Updated to 4.3.10  SECURITY UPDATE
>           Added BUILD_API=2
>           Shortened SHORT
>         * CONFIGURE: Converted to config_query
>           Removed query for imap and MAIL-TRANSPORT-AGENT
>           Added queries for pcre, calendar and ftp support
>         * DEPENDS: Removed pcre dependency, now a config_query to use internal
>           or none
>           Added optional dependencies on imap and MAIL-TRANSPORT-AGENT
>           Removed dependencies on pcre (can only use internal or none)
>           Formatted to Guru Handbook
>         * BUILD: Converted to build_api 2
>           Removed explicity support for: calendar, ftp
>           Append options from CONFIGURE to OPTS
>         * INSTALL: Branched from BUILD
>           Converted to build_api 2
>         * POST_INSTALL: Renamed to FINAL
>         * FINAL,POST_REMOVE: Removed `httpd -t`: don't fail if apache hasn't been
>           configured correctly yet
>           Cleaned up formatting
> 
> The following files are attached for spell php-pear/php:
> DETAILS
> CONFIGURE
> DEPENDS
> BUILD
> INSTALL
> FINAL
> POST_REMOVE
> HISTORY
> 
> Removed files:
> POST_INSTALL
> 
> --
> Eric Sandall                     |  Source Mage GNU/Linux Developer
> eric at sandall.us                  |  http://www.sourcemage.org/
> http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
> http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/
> 
> _______________________________________________
> SM-Security mailing list
> SM-Security at lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-security
> 
> 
> 
> 


-- 
Tommy, 
- Oh un nouveau range-CD !
- Oh un nouveau canapé !
- Oh une nouvelle lampe !
- Euh ... Oh un nouveau range-CD !
-------------- next part --------------
A non-text attachment was scrubbed...
Name: php4-4.3.10.bz2
Type: application/octet-stream
Size: 10669 bytes
Desc: not available
Url : http://lists.ibiblio.org/pipermail/sm-discuss/attachments/20041216/9142f84a/attachment.obj 


More information about the SM-Discuss mailing list