www/dotproject out of date and vulnerable

Kris Kennaway kris at obsecurity.org
Tue Sep 19 14:21:06 PDT 2006


On Tue, Sep 19, 2006 at 02:15:53PM -0700, Fred Cox wrote:
> For my second iteration of installing this through the
> original port, I was able to install mysql323-client
> and php4 before installing dotproject, and everything
> worked.  So it appears that php4-mysql will use
> mysql323-client if it's already installed.  I haven't
> dug through the code to see how that is done, though.

Yep, you can't rely on that though of course.  If the user already has
the php4-mysql port installed, or installs it from a package, it will
use the default settings.

The only solution is what I previously said.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20060919/b80b6dd2/attachment.pgp


More information about the freebsd-ports mailing list