summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/php5-cgi.NEWS24
1 files changed, 12 insertions, 12 deletions
diff --git a/debian/php5-cgi.NEWS b/debian/php5-cgi.NEWS
index 644fe09a1..b09baf305 100644
--- a/debian/php5-cgi.NEWS
+++ b/debian/php5-cgi.NEWS
@@ -1,8 +1,8 @@
php5 (5.4.4-5) unstable; urgency=low
Please be aware that the mime-support package has dropped non-standard
- definitions for PHP that might affect any systems using PHP 5 running
- as CGI or FastCGI. The following definitions were dropped:
+ definitions for PHP, which might affect any systems using PHP 5
+ running as CGI or FastCGI. The following definitions were dropped:
application/x-httpd-php phtml pht php
application/x-httpd-php-source phps
@@ -14,19 +14,19 @@ php5 (5.4.4-5) unstable; urgency=low
The php5-cgi package mitigates any known issues by creating a (dummy)
apache2 module php5_cgi with a configuration containing handlers for
all previously defined extensions. Even though we believe that this
- configuration should keep your PHP scripts interpreted, it might be a
+ configuration should keep your PHP scripts working, it might be a
good idea to check your apache2 site-wide configuration as well as
any specific PHP configuration for websites running on your system.
- The new (dummy) php5_cgi configuration uses SetHandler directive and
- thus it might interfere with your existing custom configuration like
- FastCGI (mod_fcgid or mod_fastcgi). In that case please disable
- php5_cgi module (a2dismod php5_cgi) to reenable the existing
- functionality of your custom configuration. It is also advised that
- you check your custom configuration whether it's not vulnerable to
- foo.php.jpeg attacks. The php5_cgi configuration snippet can be used
- as base - it's important to use FilesMatch or Files directive to
- limit the handling to the last extension.
+ The new (dummy) php5_cgi configuration uses the SetHandler directive,
+ which might interfere with existing custom configurations such as
+ FastCGI (mod_fcgid or mod_fastcgi). If so, you can reenable the
+ existing functionality of your custom configuration by disabling the
+ php5_cgi module (a2dismod php5_cgi), but you are also advised to
+ check whether your custom configuration is vulnerable to foo.php.jpeg
+ attacks. The php5_cgi configuration snippet can be used as a base -
+ it's important to use the FilesMatch or Files directive to limit the
+ handling to the last extension.
As far as we know definitions from the mime-support packages are not
used in any other webserver included in Debian, but it might affect