Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 06 Oct 2006 07:51:36 +0200
From:      Alain Wolf <wolf@k18.ch>
To:        freebsd-questions@freebsd.org
Subject:   Re: port php5 - what I am supposed to do here?
Message-ID:  <eg4qt9$pbs$1@sea.gmane.org>
In-Reply-To: <00aa01c6e8fa$fe19ce90$1200a8c0@gsicomp.on.ca>
References:  <eg4hu4$40i$1@sea.gmane.org> <00aa01c6e8fa$fe19ce90$1200a8c0@gsicomp.on.ca>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06.10.2006 05:53, * Matt Emmerton wrote:
> 
> You've established that the security issue doesn't apply to your
> environment.
> 
> 1) Add "DISABLE_VULNERABILITIES=yes" to /etc/make.conf
> 2) Run "portupgrade -u" or "make install clean"
> 
> Regards,
> --
> Matt Emmerton
> 

Thanks Matt, that did it. I knew it there was a way. :-)

But then ...
As everything was in sync again, I wanted to install the suhosin-patch

And see what happens:

===  Patching for php5-5.1.6_1
===  Applying distribution patches for php5-5.1.6_1
===  Applying FreeBSD patches for php5-5.1.6_1
1 out of 1 hunks failed--saving rejects to Zend/zend_alloc.c.rej
= Patch patch-Zend_zend_alloc.c failed to apply cleanly.
= Patch(es) patch-TSRM_threads.m4 patch-Zend::zend.h applied cleanly.
*** Error code 1

Stop in /usr/ports/lang/php5.


:-(

I found this stange as I read just before about the neweset patch in the
cvs.ports list :

On 05.10.2006 22:59, * Alex Dupre wrote:
> ale         2006-10-05 20:59:17 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     lang/php5            Makefile 
>   Added files:
>     lang/php5/files      patch-Zend_zend_alloc.c 
>   Log:
>   Added safety checks against integer overflow.
>   Bump PORTREVISION.
>   While I'm here, I suggest all php users to use the suhosin patch
>   and suhosin extension to harden the php installation.
>   
>   Submitted by:   simon
>   Obtained from:  PHP CVS repo.
>   
>   Revision  Changes    Path
>   1.102     +1 -1      ports/lang/php5/Makefile
>   1.1       +21 -0     ports/lang/php5/files/patch-Zend_zend_alloc.c (new)
> _______________________________________________
> cvs-ports@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/cvs-ports

He suggests the suhosin patch but in my expirience it only builds
without it.

Anybody else got this kind of problems?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFJe7oV5MZZmyxvGgRAjZoAJ0SyNSh/fcW9lK276dEEEDwRhqK3gCgnQof
mYeAV7bs8vFG4r8Cf3NxEU0=
=WUVL
-----END PGP SIGNATURE-----




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?eg4qt9$pbs$1>