Module Name:	pkgsrc
Committed By:	salo
Date:		Thu Mar 16 12:36:33 UTC 2006

Modified Files:
	pkgsrc/www/php4 [pkgsrc-2005Q4]: Makefile Makefile.common PLIST
	    distinfo
Removed Files:
	pkgsrc/www/php4/patches [pkgsrc-2005Q4]: patch-ab patch-am patch-an

Log Message:
Pullup ticket 1223 - requested by Quentin Garnier
security update for php4

Patch provided by the submitter.

   Module Name:		pkgsrc
   Committed By:	cube
   Date:		Fri Mar  3 07:11:34 UTC 2006

   Modified Files:
   	pkgsrc/www/php4: Makefile Makefile.common PLIST distinfo
   Added Files:
   	pkgsrc/www/php4/patches: patch-ao patch-ap
   Removed Files:
   	pkgsrc/www/php4/patches: patch-ab patch-am patch-an

   Log Message:
   Update to version 4.4.2.  Ok'd by jdolecek@.

   This is a bug fix release, which addresses some security problems too.
   The major points that this release corrects are:

       * Prevent header injection by limiting each header to a single line.
       * Possible XSS inside error reporting functionality.
       * Missing safe_mode/open_basedir checks into cURL extension.
       * Apache 2 regression with sub-request handling on non-Linux systems.
       * key() and current() regression related to references.

   This release also fixes about 30 other defects.
---
   Module Name:		pkgsrc
   Committed By:	cube
   Date:		Mon Mar  6 15:57:58 UTC 2006

   Modified Files:
   	pkgsrc/www/php4: distinfo
   	pkgsrc/www/php4/patches: patch-ao

   Log Message:
   Increase memory limit when installing PEAR packages.  This allows the
   installation to go through on NetBSD/sparc64 (well, at least mine).

   Failure reported by Joel Carnat.


To generate a diff of this commit:
cvs rdiff -r1.59 -r1.59.2.1 pkgsrc/www/php4/Makefile
cvs rdiff -r1.51 -r1.51.2.1 pkgsrc/www/php4/Makefile.common
cvs rdiff -r1.14 -r1.14.2.1 pkgsrc/www/php4/PLIST
cvs rdiff -r1.49 -r1.49.2.1 pkgsrc/www/php4/distinfo
cvs rdiff -r1.20 -r0 pkgsrc/www/php4/patches/patch-ab
cvs rdiff -r1.3 -r0 pkgsrc/www/php4/patches/patch-am
cvs rdiff -r1.1 -r0 pkgsrc/www/php4/patches/patch-an

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.