Subject: CVS commit: [pkgsrc-2006Q2] pkgsrc/www/php4
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 08/16/2006 07:17:41
Module Name:	pkgsrc
Committed By:	salo
Date:		Wed Aug 16 07:17:41 UTC 2006

Modified Files:
	pkgsrc/www/php4 [pkgsrc-2006Q2]: Makefile Makefile.common distinfo
	pkgsrc/www/php4/files [pkgsrc-2006Q2]: pear.sh
	pkgsrc/www/php4/patches [pkgsrc-2006Q2]: patch-ao
Added Files:
	pkgsrc/www/php4/patches [pkgsrc-2006Q2]: patch-aw
Removed Files:
	pkgsrc/www/php4/patches [pkgsrc-2006Q2]: patch-aq patch-ar patch-as
	    patch-au patch-av

Log Message:
Pullup ticket 1790 - requested by adrianp
security update for php4

Revisions pulled up:
- pkgsrc/www/php4/Makefile			1.70
- pkgsrc/www/php4/Makefile.common		1.53
- pkgsrc/www/php4/distinfo			1.56
- pkgsrc/www/php4/files/pear.sh			1.3
- pkgsrc/www/php4/patches/patch-ao		1.3
- pkgsrc/www/php4/patches/patch-aq		removed
- pkgsrc/www/php4/patches/patch-ar		removed
- pkgsrc/www/php4/patches/patch-as		removed
- pkgsrc/www/php4/patches/patch-au		removed
- pkgsrc/www/php4/patches/patch-av		removed
- pkgsrc/www/php4/patches/patch-aw		1.1

   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Thu Aug 10 23:01:40 UTC 2006

   Modified Files:
   	pkgsrc/www/php4: Makefile Makefile.common distinfo
   	pkgsrc/www/php4/files: pear.sh
   	pkgsrc/www/php4/patches: patch-ao
   Added Files:
   	pkgsrc/www/php4/patches: patch-aw
   Removed Files:
   	pkgsrc/www/php4/patches: patch-aq patch-ar patch-as patch-au patch-av

   Log Message:
   Update to 4.4.3

   All PHP 4.x users are encouraged to upgrade to this release as soon as possible.

   The security issues resolved include the following:

   * Disallow certain characters in session names.
   * Fixed a buffer overflow inside the wordwrap() function.
   * Prevent jumps to parent directory via the 2nd parameter of the tempnam()
     function.
   * Improved safe_mode check for the error_log() function.
   * Fixed cross-site scripting inside the phpinfo() function.

   The release also includes about 20 bug fixes and an upgraded PCRE library
   (version 6.6).

   For a full list of changes in PHP 4.4.3, see the ChangeLog:
   http://www.php.net/ChangeLog-4.php#4.4.3

   This also contains a fix for CVE-2006-4020 (SA21403)


To generate a diff of this commit:
cvs rdiff -r1.66.2.1 -r1.66.2.2 pkgsrc/www/php4/Makefile
cvs rdiff -r1.52 -r1.52.4.1 pkgsrc/www/php4/Makefile.common
cvs rdiff -r1.54.2.1 -r1.54.2.2 pkgsrc/www/php4/distinfo
cvs rdiff -r1.2.2.1 -r1.2.2.2 pkgsrc/www/php4/files/pear.sh
cvs rdiff -r1.2 -r1.2.6.1 pkgsrc/www/php4/patches/patch-ao
cvs rdiff -r1.1 -r0 pkgsrc/www/php4/patches/patch-aq \
    pkgsrc/www/php4/patches/patch-ar pkgsrc/www/php4/patches/patch-as
cvs rdiff -r1.1.2.1 -r0 pkgsrc/www/php4/patches/patch-au \
    pkgsrc/www/php4/patches/patch-av
cvs rdiff -r0 -r1.1.2.1 pkgsrc/www/php4/patches/patch-aw

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.