From owner-cvs-all  Wed Feb 27 12: 7:46 2002
Delivered-To: cvs-all@freebsd.org
Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5B57A37B402; Wed, 27 Feb 2002 12:07:35 -0800 (PST)
Received: by peitho.fxp.org (Postfix, from userid 1000)
	id D56A813667; Wed, 27 Feb 2002 15:07:34 -0500 (EST)
Date: Wed, 27 Feb 2002 15:07:34 -0500
From: Chris Faulhaber <jedgar@fxp.org>
To: Blaz Zupan <blaz@si.FreeBSD.org>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: ports/www/mod_php4 Makefile
Message-ID: <20020227200734.GA21196@peitho.fxp.org>
References: <20020227191621.GB10348@peitho.fxp.org> <20020227202842.R96183-100000@titanic.medinet.si>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="sdtB3X0nJg68CQEu"
Content-Disposition: inline
In-Reply-To: <20020227202842.R96183-100000@titanic.medinet.si>
User-Agent: Mutt/1.3.24i
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG


--sdtB3X0nJg68CQEu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Feb 27, 2002 at 08:55:25PM +0100, Blaz Zupan wrote:
> > On Wed, Feb 27, 2002 at 11:05:28AM -0800, Chris D. Faulhaber wrote:
> > > jedgar      2002/02/27 11:05:28 PST
> > >
> > >   Modified files:
> > >     www/mod_php4         Makefile
> > >   Log:
> > >   Mark as FORBIDDEN due to being remotely exploitable.
> > >
> > >   Revision  Changes    Path
> > >   1.161     +2 -0      ports/www/mod_php4/Makefile
> > >
> >
> > FYI: http://security.e-matters.de/advisories/012002.html
>=20
> Wouldn't this be more effective:
>=20
> diff -urN mod_php4.old/Makefile mod_php4/Makefile
> --- mod_php4.old/Makefile	Thu Jan 10 07:01:16 2002
> +++ mod_php4/Makefile	Wed Feb 27 20:51:46 2002
> @@ -6,7 +6,7 @@
>  #
>=20
>  PORTNAME?=3D	mod_php4
> -PORTVERSION=3D	4.1.1
> +PORTVERSION=3D	4.1.2
>  PORTREVISION?=3D	0
>  CATEGORIES?=3D	www
>  MASTER_SITES=3D	http://us.php.net/${PHP_DISTDIR}/ \
> diff -urN mod_php4.old/distinfo mod_php4/distinfo
> --- mod_php4.old/distinfo	Thu Dec 27 06:40:30 2001
> +++ mod_php4/distinfo	Wed Feb 27 20:54:58 2002
> @@ -1,2 +1,2 @@
> -MD5 (php-4.1.1.tar.gz) =3D 776362ff53bf6ea77b60496f6632b6b6
>  MD5 (php4_mbregex-1.2.1.tar.gz) =3D 46d151afa9ab668df880a70cf786a2c2
> +MD5 (php-4.1.2.tar.gz) =3D 75a62553076c20e91d3be575ce158be2

Probably, but I will let the maintainer update the ports as
appropriate.

--=20
Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org
--------------------------------------------------------
FreeBSD: The Power To Serve   -   http://www.FreeBSD.org

--sdtB3X0nJg68CQEu
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: FreeBSD: The Power To Serve

iEYEARECAAYFAjx9PIYACgkQObaG4P6BelDqVgCdHgKTdgE50RrssJ2CWvUl7md0
IcsAn0Mnuyqpyz/S2lqFB3llou/D0KzZ
=MTHE
-----END PGP SIGNATURE-----

--sdtB3X0nJg68CQEu--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message