port php5 - what I am supposed to do here?

Alain Wolf wolf at k18.ch
Thu Oct 5 22:52:14 PDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06.10.2006 05:53, * Matt Emmerton wrote:
> 
> You've established that the security issue doesn't apply to your
> environment.
> 
> 1) Add "DISABLE_VULNERABILITIES=yes" to /etc/make.conf
> 2) Run "portupgrade -u" or "make install clean"
> 
> Regards,
> --
> Matt Emmerton
> 

Thanks Matt, that did it. I knew it there was a way. :-)

But then ...
As everything was in sync again, I wanted to install the suhosin-patch

And see what happens:

===  Patching for php5-5.1.6_1
===  Applying distribution patches for php5-5.1.6_1
===  Applying FreeBSD patches for php5-5.1.6_1
1 out of 1 hunks failed--saving rejects to Zend/zend_alloc.c.rej
= Patch patch-Zend_zend_alloc.c failed to apply cleanly.
= Patch(es) patch-TSRM_threads.m4 patch-Zend::zend.h applied cleanly.
*** Error code 1

Stop in /usr/ports/lang/php5.


:-(

I found this stange as I read just before about the neweset patch in the
cvs.ports list :

On 05.10.2006 22:59, * Alex Dupre wrote:
> ale         2006-10-05 20:59:17 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     lang/php5            Makefile 
>   Added files:
>     lang/php5/files      patch-Zend_zend_alloc.c 
>   Log:
>   Added safety checks against integer overflow.
>   Bump PORTREVISION.
>   While I'm here, I suggest all php users to use the suhosin patch
>   and suhosin extension to harden the php installation.
>   
>   Submitted by:   simon
>   Obtained from:  PHP CVS repo.
>   
>   Revision  Changes    Path
>   1.102     +1 -1      ports/lang/php5/Makefile
>   1.1       +21 -0     ports/lang/php5/files/patch-Zend_zend_alloc.c (new)
> _______________________________________________
> cvs-ports at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/cvs-ports

He suggests the suhosin patch but in my expirience it only builds
without it.

Anybody else got this kind of problems?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFJe7oV5MZZmyxvGgRAjZoAJ0SyNSh/fcW9lK276dEEEDwRhqK3gCgnQof
mYeAV7bs8vFG4r8Cf3NxEU0=
=WUVL
-----END PGP SIGNATURE-----



More information about the freebsd-questions mailing list