Skip to Content.
Sympa Menu

sm-security - [SM-Security] SECURITY UPDATE for php-pear/php4

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Eric Sandall <eric AT sandall.us>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] SECURITY UPDATE for php-pear/php4
  • Date: Wed, 15 Dec 2004 16:26:20 -0800 (PST)

(copied and modified from Seth's e-mail ;))

php-hardended found a number of major security flaws used in common software such that everybody needs an update.

No exploits yet, but it won't take long to find them, remote, yes.

2004-12-15 Eric Sandall <eric AT sandall.us>
* DETAILS: Updated to 4.3.10 SECURITY UPDATE
Added BUILD_API=2
Shortened SHORT
* CONFIGURE: Converted to config_query
Removed query for imap and MAIL-TRANSPORT-AGENT
Added queries for pcre, calendar and ftp support
* DEPENDS: Removed pcre dependency, now a config_query to use internal
or none
Added optional dependencies on imap and MAIL-TRANSPORT-AGENT
Removed dependencies on pcre (can only use internal or none)
Formatted to Guru Handbook
* BUILD: Converted to build_api 2
Removed explicity support for: calendar, ftp
Append options from CONFIGURE to OPTS
* INSTALL: Branched from BUILD
Converted to build_api 2
* POST_INSTALL: Renamed to FINAL
* FINAL,POST_REMOVE: Removed `httpd -t`: don't fail if apache hasn't
been
configured correctly yet
Cleaned up formatting

The following files are attached for spell php-pear/php:
DETAILS
CONFIGURE
DEPENDS
BUILD
INSTALL
FINAL
POST_REMOVE
HISTORY

Removed files:
POST_INSTALL

--
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/

Attachment: php4.tar.bz2
Description: Binary data



  • [SM-Security] SECURITY UPDATE for php-pear/php4, Eric Sandall, 12/15/2004

Archive powered by MHonArc 2.6.24.

Top of Page