From 1050521edeabb290be83f049e345131e0691b09e Mon Sep 17 00:00:00 2001 From: cube Date: Fri, 14 Apr 2006 13:47:29 +0000 Subject: PHP4/5 security changes... They're not critical issues; secunia classes them between "not critical" and "less critical". Fix CVE-2006-0996, CVE-2006-1494, CVE-2006-1608, CVE-2006-1490. See: http://secunia.com/advisories/19383/ http://secunia.com/advisories/19599/ Patches were extracted from CVS. I had to translate the one for CVE-2006-1608 on php4 because it has not made its way to the php4.4 branch (I don't know why; I can confirm it fixes the issue). While here, add PATCHDIR to the list of variables php5's Makefile.php defines. That way, ap-php gets patched too... --- www/ap-php/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'www/ap-php') diff --git a/www/ap-php/Makefile b/www/ap-php/Makefile index 04183cc3912..35e2e03291c 100644 --- a/www/ap-php/Makefile +++ b/www/ap-php/Makefile @@ -1,8 +1,8 @@ -# $NetBSD: Makefile,v 1.8 2006/02/05 23:11:17 joerg Exp $ +# $NetBSD: Makefile,v 1.9 2006/04/14 13:47:30 cube Exp $ # PKGNAME= ap-php-${PHP_BASE_VERS} -PKGREVISION= 5 +PKGREVISION= 6 COMMENT= Apache (${PKG_APACHE}) module for ${PKG_PHP} APACHE_MODULE= YES -- cgit v1.2.3