Security bugs are reported here via bugzilla

[Seth Alan Woolley <seth AT positivism.org>]

php-hardended found a number of major security flaws used in common 
software such that everybody needs an update.

No exploits yet, but it won't take long to find them, remote, yes.

sandalle is building php4 for testing as well, an update should follow 
shortly.

2004-12-15 Seth Woolley <seth AT tautology.org>
        * DETAILS: Updated to 5.0.3 SECURITY FIX
        * DEPENDS: removed pcre dependency (always use internal PCRE)
        * CONFIGURE: query for internal PCRE support or none
        * BUILD: optionally use internal PCRE support or none

The following files are attached for spell php-pear/php:
BUILD
CONFIGURE
CONFLICTS
DEPENDS
DETAILS
FINAL
HISTORY
INSTALL
POST_REMOVE
PRE_REMOVE
PROVIDES


-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.25047.tar.bz2
Description: Binary data

Attachment: pgpOs7KwR3E2L.pgp
Description: PGP signature