From owner-freebsd-ports@FreeBSD.ORG  Wed Sep 20 07:31:52 2006
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
X-Original-To: freebsd-ports@freebsd.org
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7B06616A47C
	for <freebsd-ports@freebsd.org>; Wed, 20 Sep 2006 07:31:52 +0000 (UTC)
	(envelope-from ale@FreeBSD.org)
Received: from andxor.it (relay.andxor.it [195.223.2.3])
	by mx1.FreeBSD.org (Postfix) with SMTP id 3D47C43D70
	for <freebsd-ports@freebsd.org>; Wed, 20 Sep 2006 07:31:07 +0000 (GMT)
	(envelope-from ale@FreeBSD.org)
Received: (qmail 984 invoked from network); 20 Sep 2006 07:30:49 -0000
Received: from unknown (HELO ?192.168.2.5?) (192.168.2.5)
	by andxor.it with SMTP; 20 Sep 2006 07:30:49 -0000
Message-ID: <4510EE29.5050600@FreeBSD.org>
Date: Wed, 20 Sep 2006 09:30:49 +0200
From: Alex Dupre <ale@FreeBSD.org>
User-Agent: Mozilla Thunderbird 1.5.0.5 (X11/20060829)
MIME-Version: 1.0
To: Fred Cox <sailorfred@yahoo.com>
References: <20060920072043.47129.qmail@web31808.mail.mud.yahoo.com>
In-Reply-To: <20060920072043.47129.qmail@web31808.mail.mud.yahoo.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-ports@freebsd.org, Kris Kennaway <kris@obsecurity.org>
Subject: Re: www/dotproject out of date and vulnerable
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Sep 2006 07:31:52 -0000

Fred Cox ha scritto:
> So how about this:
> 
> Update the version to 2.0.4 to avoid the
> vulnerability.
> 
> Modify Makefile to require PHP4:
> 
> DEFAULT_PHP_VER=4
> WANT_PHP_WEB=   yes
> IGNORE_WITH_PHP=5
> 
> Add to the files/pkg-message.in to inform the user
> that they must have a remote or jailed mysql 3.23 or
> make the published patches.

They need MySQL 3.23 server for running sql scripts. Local, remote, 
jailed or virtual is not important.
Fine for me.

--
Alex Dupre