a security fix for a file-upload bug.
<===> SECURITY NOTE <===>
Note that the buffer overflow fix is a major security fix. Quoting from
the security advisory at:
http://security.e-matters.de/advisories/012002.html
"PHP supports multipart/form-data POST requests (as described in RFC1867)
known as POST fileuploads. Unfourtunately there are several flaws in the
php_mime_split function that could be used by an attacker to execute
arbitrary code. During our research we found out that not only PHP4 but
also older versions from the PHP3 tree are vulnerable.
modules are handled. Also buildlinkify, honor ${PKG_SYSCONFDIR}, and use
the general INSTALL scripts to handle the php3.ini config file. Become
the maintainer since the changes to the package structure are fairly large.
The new framework should make creating new PHP3 modules simpler, and makes
buildlinkifying those modules simpler as well.
foo-* to foo-[0-9]*. This is to cause the dependencies to match only the
packages whose base package name is "foo", and not those named "foo-bar".
A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also
change dependency examples in Packages.txt to reflect this.
first component is now a package name+version/pattern, no more
executable/patchname/whatnot.
While there, introduce BUILD_USES_MSGFMT as shorthand to pull in
devel/gettext unless /usr/bin/msgfmt exists (i.e. on post-1.5 -current).
Patch by Alistair Crooks <agc@netbsd.org>
- the CGI-based interpreter, xbase support binaries, and php2 converter
- compiled-in support for Berkeley DB (ndbm), yp, zlib, dBase (xbase),
and filePro
- the ability to compile PHP3 extensions as dynamic modules (such as support
for MySQL/PostgreSQL/freeODBC) that may be exchanged freely between
different server interfaces to PHP (abstractions.c and php.h/tls.h patches)
- New, optional Makefile variable HOMEPAGE, specifies a URL for
the home page of the software if it has one.
- The value of HOMEPAGE is used to add a link from the
README.html files.
- pkglint updated to know about it. The "correct" location for
HOMEPAGE in the Makefile is after MAINTAINER, in that same
section.
