> BTW, php-4.1.2 it *not* vulnerable, there was a mistake in the vulnerability > file. Maybe try to downgrade to php-4.1.2 ? I've uploaded the binary > package to the ftp server again. Well, pkgsrc has been updated. I never tried to downgrade pkgsrc and do a make update. Does it works at all? -- Emmanuel Dreyfus manu@netbsd.org