From owner-freebsd-ports@FreeBSD.ORG Thu Feb 1 13:21:50 2007 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E467D16A402 for ; Thu, 1 Feb 2007 13:21:50 +0000 (UTC) (envelope-from bsd@lordcow.org) Received: from mail.uct.ac.za (mail.uct.ac.za [137.158.153.100]) by mx1.freebsd.org (Postfix) with ESMTP id 815BE13C428 for ; Thu, 1 Feb 2007 13:21:46 +0000 (UTC) (envelope-from bsd@lordcow.org) Received: from lhc.phy.uct.ac.za ([137.158.37.93]) by mail.uct.ac.za with esmtp (Exim 4.44 (FreeBSD)) id 1HCbsn-000IRU-7l for ports@freebsd.org; Thu, 01 Feb 2007 15:21:45 +0200 Received: from lordcow by lhc.phy.uct.ac.za with local (Exim 4.63) (envelope-from ) id 1HCbso-0004S4-PV for ports@freebsd.org; Thu, 01 Feb 2007 15:21:46 +0200 Date: Thu, 1 Feb 2007 15:21:46 +0200 From: gareth To: ports@freebsd.org Message-ID: <20070201132146.GA17062@lordcow.org> Mail-Followup-To: ports@freebsd.org References: <20070125032857.GA5686@lordcow.org> <679088c80701241951t164cee51rd61062f5de9e87dc@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <679088c80701241951t164cee51rd61062f5de9e87dc@mail.gmail.com> User-Agent: Mutt/1.5.13 (2006-08-11) Cc: Subject: Re: phpBB patch? X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2007 13:21:51 -0000 On Wed 2007-01-24 (19:51), Gordon Stratton wrote: > On 1/24/07, gareth wrote: > >hi, portupgrade just upgraded phpbb-2.0.22 to phpbb-2.0.22_1. > >it used phpBB-2.0.22.tar.bz2 from www.phpbb.com (same as before), > >and as far as i can tell the .php files are the same (and naturally > >the database is untouched). does anyone know what this upgrade > >was meant to achieve? > > >From the log[1]: > --- > Remove previously added security patch against session table > exhaustion, as it causes more problems in the latest phpbb > version. Users are advised to drop and re-create their > session tables (phpbb_sessions, phpbb_sessions_keys) without > using "HEAP" tables. ah, thanx for the link. so this's the only thing that changed? : http://www.freebsd.org/cgi/cvsweb.cgi/ports/www/phpbb/files/Attic/security-patch-includes-sessions.php?annotate=1.2