Subject: CVS commit: pkgsrc/www/php4
From: Adrian Portelli
Date: 2008-01-04 11:07:54
Message id: 20080104100754.539DC21507@cvs.netbsd.org

Log Message:
Update to 4.4.8

Improved fix for MOPB-02-2007.
Fixed an integer overflow inside chunk_split(). Identified by Gerhard Wagner.
Fixed integer overlow in str[c]spn().
Fixed regression in glob when open_basedir is on introduced by 41655 fix.
Fixed money_format() not to accept multiple %i or %n tokens.
Addded "max_input_nesting_level" php.ini option to limit nesting level \ 
of input variables. Fix for MOPB-03-2007.
Fixed INFILE LOCAL option handling with MySQL - now not allowed when \ 
open_basedir or safe_mode is active.
Fixed session.save_path and error_log values to be checked against open_basedir \ 
and safe_mode (CVE-2007-3378).
Fixed bug 43010 (Fixed regression in imagearc with two equivelent angles).
Fixed bug 41765 (Recode crashes/does not work on amd64).
Fixed bug 41630 (segfault when an invalid color index is present in the image data).
Fixed bug 41628 (PHP settings leak between Virtual Hosts in Apache 1.3).
Fixed bug 38798 (OpenSSL init corrected in php5 but not in php4).

Files:
RevisionActionfile
1.80modifypkgsrc/www/php4/Makefile
1.57modifypkgsrc/www/php4/Makefile.common
1.67modifypkgsrc/www/php4/distinfo
1.3removepkgsrc/www/php4/patches/patch-aw