a630484f42
This is a bug fix release, which addresses some security problems too.
The major points that this release corrects are:
* Prevent header injection by limiting each header to a single line.
* Possible XSS inside error reporting functionality.
* Missing safe_mode/open_basedir checks into cURL extension.
* Apache 2 regression with sub-request handling on non-Linux systems.
* key() and current() regression related to references.
This release also fixes about 30 other defects.
12 lines
436 B
Text
12 lines
436 B
Text
$NetBSD: patch-ap,v 1.1 2006/03/03 07:11:34 cube Exp $
|
|
|
|
--- pear/install-pear.php.orig 2006-01-07 18:51:54.000000000 +0100
|
|
+++ pear/install-pear.php
|
|
@@ -167,6 +167,7 @@ foreach ($install_files as $package => $
|
|
}
|
|
} else {
|
|
$options['nodeps'] = true;
|
|
+ $options['force'] = $force;
|
|
$installer->setOptions($options);
|
|
$dp = array(&$downloaderpackage);
|
|
$installer->setDownloadedPackages($dp);
|