Some error in php4-4.4.7_2

[Remko Lodder]

Schiz0 wrote:
> On Nov 28, 2007 7:25 AM, Alexander Berjoza <bereza.alexander at gmail.com> wrote:
>> Good day,
>>
>>   I have a problem. I can't install PHP4 on my server.
>> Problem is, by steps:
>>
>>   0. Port is not installed on my system
>>
>>   1. I try to install from ports PHP4 (/usr/ports/lang/php4) and get message
>>      ===>  php4-4.4.7_2 has known vulnerabilities:
>>      => php -- multiple vulnerabilities.
>>         Reference: <
>> http://www.FreeBSD.org/ports/portaudit/71d903fc-602d-11dc-898c-001921ab2fa4.html
>>      => Please update your ports tree and try again.
>>      *** Error code 1
>>
>>   2. Then I update ports (using cvsup and then portupgrade) and try again,
>> and get this message again
>>      ===>  php4-4.4.7_2 has known vulnerabilities:
>>      => php -- multiple vulnerabilities.
>>         Reference: <
>> http://www.FreeBSD.org/ports/portaudit/71d903fc-602d-11dc-898c-001921ab2fa4.html
>>      => Please update your ports tree and try again.
>>      *** Error code 1
>>
>> Thank you for answer.
>>
>> Alexander
>>   tel.  : 80979195448
>>   e-mail: bereza.alexander at gmail.com
>> _______________________________________________
>> freebsd-bugs at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
>> To unsubscribe, send any mail to "freebsd-bugs-unsubscribe at freebsd.org"
>>
> 
> It's just saying that php4 has some vulnerabilities. You have to
> define the env variable "DISABLE_VULNERABILITIES" to skip this check.
> 
> See http://www.freebsd.org/cgi/man.cgi?query=ports&apropos=0&sektion=0&manpath=FreeBSD+6.2-stable&format=html
> Look towards the bottom.

If you offer this solution please do not forget to notice that this is
at your own risk, we do not identify vulnerabilities for nothing and
you can be under risk doing this. Please consider carefully; or use a
supported (by the PHP team) version of PHP which has no known
vulnerabilities at the moment (the 5.x branch at the moment).

//Remo

-- 
/"\   Best regards,                      | remko at FreeBSD.org
\ /   Remko Lodder                       | remko at EFnet
 X    http://www.evilcoder.org/          |
/ \   ASCII Ribbon Campaign              | Against HTML Mail and News