From owner-cvs-all@FreeBSD.ORG  Mon Oct 16 16:54:31 2006
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A14FD16A40F;
	Mon, 16 Oct 2006 16:54:31 +0000 (UTC)
	(envelope-from simon@zaphod.nitro.dk)
Received: from mx.nitro.dk (zarniwoop.nitro.dk [83.92.207.38])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2AB5543D49;
	Mon, 16 Oct 2006 16:54:30 +0000 (GMT)
	(envelope-from simon@zaphod.nitro.dk)
Received: from zaphod.nitro.dk (unknown [192.168.3.39])
	by mx.nitro.dk (Postfix) with ESMTP id CD5B33010D7;
	Mon, 16 Oct 2006 16:54:28 +0000 (UTC)
Received: by zaphod.nitro.dk (Postfix, from userid 3000)
	id 940831141D; Mon, 16 Oct 2006 18:54:28 +0200 (CEST)
Date: Mon, 16 Oct 2006 18:54:28 +0200
From: "Simon L. Nielsen" <simon@FreeBSD.org>
To: Alex Dupre <ale@FreeBSD.org>
Message-ID: <20061016165426.GA1040@zaphod.nitro.dk>
References: <200610160930.k9G9UwJj029252@repoman.freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200610160930.k9G9UwJj029252@repoman.freebsd.org>
User-Agent: Mutt/1.5.11
Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org
Subject: Re: cvs commit: ports/lang/php4 Makefile ports/lang/php4/files
	patch-ext_standard_dir.c patch-main_php_open_temporary_file.c
	patch-php.ini-dist patch-php.ini-recommended ports/lang/php5
	Makefile ports/lang/php5/files patch-ext_standard_dir.c
	patch-main_php_open_temporary_file.c ...
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Oct 2006 16:54:31 -0000

On 2006.10.16 09:30:58 +0000, Alex Dupre wrote:
> ale         2006-10-16 09:30:58 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     lang/php4            Makefile 
>     lang/php5            Makefile 
>   Added files:
>     lang/php4/files      patch-ext_standard_dir.c 
>                          patch-main_php_open_temporary_file.c 
>                          patch-php.ini-dist 
>                          patch-php.ini-recommended 
>     lang/php5/files      patch-ext_standard_dir.c 
>                          patch-main_php_open_temporary_file.c 
>                          patch-php.ini-dist 
>                          patch-php.ini-recommended 
>   Log:
>   - fix open_basedir vulnerability in php4 and php5 [1]

Do you have a CVE name or a reference for exactly which issue this is?

>   - add an alert on safe_mode intrinsic insecurity and
>     suggest to install the suhosin extension
>   - enable the suhosin patch by deafult also in php4

<secteam hat>Thanks!</>

-- 
Simon L. Nielsen