The following reply was made to PR pkg/32007; it has been noted by GNATS.

From: Geert Hendrickx <ghen@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: PR/32007 CVS commit: [pkgsrc-2006Q3] pkgsrc
Date: Sun, 29 Oct 2006 16:47:58 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	ghen
 Date:		Sun Oct 29 16:47:58 UTC 2006
 
 Modified Files:
 	pkgsrc/lang/php5 [pkgsrc-2006Q3]: Makefile Makefile.php distinfo
 	pkgsrc/www/ap-php [pkgsrc-2006Q3]: Makefile
 	pkgsrc/www/php4 [pkgsrc-2006Q3]: Makefile Makefile.php distinfo
 Added Files:
 	pkgsrc/lang/php5/patches [pkgsrc-2006Q3]: patch-aa patch-ab
 	pkgsrc/www/php4/patches [pkgsrc-2006Q3]: patch-au
 
 Log Message:
 Pullup ticket 1889 - requested by adrianp
 security fix for php
 
 Revisions pulled up:
 - pkgsrc/lang/php5/Makefile			1.44-1.45
 - pkgsrc/lang/php5/Makefile.php			1.20
 - pkgsrc/lang/php5/distinfo			1.30
 - pkgsrc/lang/php5/patches/patch-aa		1.1
 - pkgsrc/lang/php5/patches/patch-ab		1.2
 - pkgsrc/lang/www/ap-php/Makefile		1.12
 - pkgsrc/lang/www/php4/Makefile			1.71-1.72
 - pkgsrc/lang/www/php4/Makefile.php		1.36
 - pkgsrc/lang/www/php4/distinfo			1.58
 - pkgsrc/lang/www/php4/patches/patch-au		1.3
 
    Module Name:	pkgsrc
    Committed By:	jdolecek
    Date:		Fri Oct 20 22:10:34 UTC 2006
 
    Modified Files:
 	pkgsrc/lang/php5: Makefile Makefile.php
 	pkgsrc/www/ap-php: Makefile
 	pkgsrc/www/php4: Makefile Makefile.php
 
    Log Message:
    remove --enable-memory-limit - 8MB is too low, and this just
    duplicates process resource limits, which already provide necessary
    "safety net" protection against rogue scripts
 
    bump PKGREVISION for this
 
    adressess PR pkg/32007 by "pancake"
 
    also remove --enable-track-vars, since that configure argument
    is long gone from PHP
 ---
    Module Name:	pkgsrc
    Committed By:	adrianp
    Date:		Sun Oct 22 13:16:42 UTC 2006
 
    Modified Files:
 	pkgsrc/www/php4: Makefile distinfo
    Added Files:
 	pkgsrc/www/php4/patches: patch-au
 
    Log Message:
    Fix for CVE-2006-4625
    Bump nb
 ---
    Module Name:	pkgsrc
    Committed By:	adrianp
    Date:		Sun Oct 22 13:19:19 UTC 2006
 
    Modified Files:
 	pkgsrc/lang/php5: Makefile distinfo
    Added Files:
 	pkgsrc/lang/php5/patches: patch-aa patch-ab
 
    Log Message:
    Fixes for CVE-2006-4812 and CVE-2006-4625
    Bump nb
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.43 -r1.43.2.1 pkgsrc/lang/php5/Makefile
 cvs rdiff -r1.19 -r1.19.4.1 pkgsrc/lang/php5/Makefile.php
 cvs rdiff -r1.29 -r1.29.2.1 pkgsrc/lang/php5/distinfo
 cvs rdiff -r0 -r1.1.2.1 pkgsrc/lang/php5/patches/patch-aa \
     pkgsrc/lang/php5/patches/patch-ab
 cvs rdiff -r1.11 -r1.11.2.1 pkgsrc/www/ap-php/Makefile
 cvs rdiff -r1.70 -r1.70.2.1 pkgsrc/www/php4/Makefile
 cvs rdiff -r1.35 -r1.35.8.1 pkgsrc/www/php4/Makefile.php
 cvs rdiff -r1.57 -r1.57.2.1 pkgsrc/www/php4/distinfo
 cvs rdiff -r0 -r1.2.2.1 pkgsrc/www/php4/patches/patch-au
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.