Security bugs are reported here via bugzilla

[Eric Sandall <eric AT sandall.us>]

(copied and modified from Seth's e-mail ;))

php-hardended found a number of major security flaws used in common 
software such that everybody needs an update.

No exploits yet, but it won't take long to find them, remote, yes.

2004-12-15 Eric Sandall <eric AT sandall.us>
        * DETAILS: Updated to 4.3.10  SECURITY UPDATE
          Added BUILD_API=2
          Shortened SHORT
        * CONFIGURE: Converted to config_query
          Removed query for imap and MAIL-TRANSPORT-AGENT
          Added queries for pcre, calendar and ftp support
        * DEPENDS: Removed pcre dependency, now a config_query to use internal
          or none
          Added optional dependencies on imap and MAIL-TRANSPORT-AGENT
          Removed dependencies on pcre (can only use internal or none)
          Formatted to Guru Handbook
        * BUILD: Converted to build_api 2
          Removed explicity support for: calendar, ftp
          Append options from CONFIGURE to OPTS
        * INSTALL: Branched from BUILD
          Converted to build_api 2
        * POST_INSTALL: Renamed to FINAL
        * FINAL,POST_REMOVE: Removed `httpd -t`: don't fail if apache hasn't 
been
          configured correctly yet
          Cleaned up formatting

The following files are attached for spell php-pear/php:
DETAILS
CONFIGURE
DEPENDS
BUILD
INSTALL
FINAL
POST_REMOVE
HISTORY

Removed files:
POST_INSTALL

--
Eric Sandall                     |  Source Mage GNU/Linux Developer
eric AT sandall.us                  |  http://www.sourcemage.org/
http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/

Attachment: php4.tar.bz2
Description: Binary data