pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

php-5.2.14 and security vulnerability



Hello,

I was on my way to compile database/php5-ldap.
In that process, I encountered the following error:
 ===> Checking for vulnerabilities in php-5.2.14
 Package php-5.2.14 has a multiple-vulnerabilities vulnerability, see 
http://secunia.com/advisories/39675/
 Package php-5.2.14 has a denial-of-service vulnerability, see 
http://secunia.com/advisories/41724/
 Package php-5.2.14 has a sensitive-information-exposure vulnerability, see 
http://secunia.com/advisories/42135/
 ERROR: Define ALLOW_VULNERABLE_PACKAGES in mk.conf or IGNORE_URL in 
pkg_install.conf(5) if this package is absolutely essential.

Do we have a safe (hear not using ALLOW_VULNERABLE_PACKAGES ;) way to enable 
PHP ?
I couldn't find any update notification on the CVS tree.

Did I miss something ?

TIA,
  Jo


Home | Main Index | Thread Index | Old Index