Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2008-01-15 09:33:29 by Geert Hendrickx | Files touched by this commit (4) | |
Log message:
Pullup ticket 2267 - requested by adrianp
security update for php4
- pkgsrc/lang/php4/Makefile 1.80
- pkgsrc/lang/php4/Makefile.common 1.57
- pkgsrc/lang/php4/distinfo 1.67
- pkgsrc/lang/php4/patches/patch-aw removed
Module Name: pkgsrc
Committed By: adrianp
Date: Fri Jan 4 10:07:54 UTC 2008
Modified Files:
pkgsrc/www/php4: Makefile Makefile.common distinfo
Removed Files:
pkgsrc/www/php4/patches: patch-aw
Log message:
Update to 4.4.8
Improved fix for MOPB-02-2007.
Fixed an integer overflow inside chunk_split(). Identified by Gerhard Wagner.
Fixed integer overlow in str[c]spn().
Fixed regression in glob when open_basedir is on introduced by 41655 fix.
Fixed money_format() not to accept multiple %i or %n tokens.
Addded "max_input_nesting_level" php.ini option to limit nesting \
level of input variables. Fix for MOPB-03-2007.
Fixed INFILE LOCAL option handling with MySQL - now not allowed when \
open_basedir or safe_mode is active.
Fixed session.save_path and error_log values to be checked against \
open_basedir and safe_mode (CVE-2007-3378).
Fixed bug 43010 (Fixed regression in imagearc with two equivelent angles).
Fixed bug 41765 (Recode crashes/does not work on amd64).
Fixed bug 41630 (segfault when an invalid color index is present in the image \
data).
Fixed bug 41628 (PHP settings leak between Virtual Hosts in Apache 1.3).
Fixed bug 38798 (OpenSSL init corrected in php5 but not in php4).
|
Next | Query returned 1 messages, browsing 1 to 10 | previous