1cc929effe
- Fixed start up failure when mm save handler is used and there is multiple SAPIs are working at the same time. (Yasuo) - Fixed a buffer overflow in the RFC-1867 file upload code (Stefan) <===> SECURITY NOTE <===> Note that the buffer overflow fix is a major security fix. Quoting from the security advisory at: http://security.e-matters.de/advisories/012002.html "PHP supports multipart/form-data POST requests (as described in RFC1867) known as POST fileuploads. Unfourtunately there are several flaws in the php_mime_split function that could be used by an attacker to execute arbitrary code. During our research we found out that not only PHP4 but also older versions from the PHP3 tree are vulnerable. [...] "If you are running PHP 4.0.3 or above one way to workaround these bugs is to disable the fileupload support within your php.ini (file_uploads = Off). If you are running php as module keep in mind to restart the webserver. Anyway you should better install the fixed or a properly patched version to be safe."
11 lines
576 B
Text
11 lines
576 B
Text
$NetBSD: distinfo,v 1.8 2002/02/28 06:14:46 jlam Exp $
|
|
|
|
SHA1 (php-4.1.2.tar.gz) = fc4f9685b2b26d6e12af2e746a34fadfe57f0466
|
|
Size (php-4.1.2.tar.gz) = 3359964 bytes
|
|
SHA1 (patch-aa) = 08f98c6b41c24a2aa8fa417bba50cf0cb5f711af
|
|
SHA1 (patch-ac) = 9478c18dbe18e8c4c05dffce31fa3f923562c832
|
|
SHA1 (patch-ad) = 3b90e5c60493689cfad5ea3563f19d03b7b3f354
|
|
SHA1 (patch-ae) = e7acc06a63f47053c81ab442b53c68d89d122f78
|
|
SHA1 (patch-af) = 34ec060ed3cdbcfc44286323f85f9938a79b0444
|
|
SHA1 (patch-ag) = 91e84f6d6862a328d3f66f87260e8f2b2953fc11
|
|
SHA1 (patch-ah) = 75404d3b85a82a2b23ceb2b1e9f41d9b09257100
|