www/dotproject out of date and vulnerable
Kris Kennaway
kris at obsecurity.org
Tue Sep 19 18:34:01 PDT 2006
On Tue, Sep 19, 2006 at 06:25:50PM -0700, Fred Cox wrote:
> > > It's still better than the current situation.
> >
> > Publishing packages that will not run because
> > they're linked to the
> > wrong libraries is, again, not my idea of "better".
> >
>
> There is no linkage problem. It's a client/server
> problem.
>
> PHP4 is perfectly happy being linked with the MySQL 5
> client libraries, it's the database server that needs
> to be 3.23. The SQL used in dotProject is legal for
> 3.23, but not 5.
Then you haven't explained yourself very well, because at the start of
this thread you were talking about a conflict between the mysql 3 and
mysql 5 *clients*, not servers.
--
Trying to get it to install MySQL 3.23 client seems to
be stymied by the php4-mysql default dependency on the
MySQL 5 client. I haven't actually figured out how it
specifies this dependency, since the
php4-mysql/Makefile is very empty.
--
So, does it or does it not require the mysql 3.23 client in
php4-mysql and dotproject?
> > Copy the php4-mysql port to php4-mysql3 and make the
> > presumably
> > trivial change to make it use mysql 3 instead of
> > whatever the default
> > is.
> >
>
> It's not trivial. The current Makefile is trivial,
> but a change to do what you're suggesting will need to
> be more complex.
>
> Here's the current php4-mysql Makefile:
>
> CATEGORIES= databases
>
> MASTERDIR= ${.CURDIR}/../../lang/php4
>
> PKGNAMESUFFIX= -mysql
>
> .include "${MASTERDIR}/Makefile"
>
> The ${MASTERDIR}/Makefile doesn't refer to mysql at
> all.
>
> Personally, I don't see how it knows it's supposed to
> link MySQL in there. Perhaps it's because PHP4
> defaults to including MySQL support, so this isn't
> really doing anything. I haven't read far enough to
> know for sure.
Look in <bsd.php.mk> for the rest.
Kris
More information about the freebsd-ports
mailing list