php4 update

Olivier Mueller om-lists-bsd at omx.ch
Mon Oct 16 18:47:39 UTC 2006


On Mon, 2006-10-16 at 10:25 -0700, Dominik Zalewski wrote:
> Hi everybody,
> I'm running FreeBSD  6.1-RELEASE on i386. I wanted to upgrade my php to
> latest version 4.4.4_1 cause of security update.
> When running portupgrade php4 I got:
> 
> 
> => php -- open_basedir Race Condition Vulnerability.
>    Reference: <
> http://www.FreeBSD.org/ports/portaudit/edabe438-542f-11db-a5ae-00508d6a62df.html<http://www.freebsd.org/ports/portaudit/edabe438-542f-11db-a5ae-00508d6a62df.html>
> >
> => Please update your ports tree and try again.

Short version: add this to your /etc/make.conf:

# PHP 4 Port installation options
.if${.CURDIR:M*/lang/php4*}
DISABLE_VULNERABILITIES=yes
.endif


Long version: check in the newsgroups or mailing lists archives... :)

HTH,
Olivier



More information about the freebsd-stable mailing list