PHP vulnerabilities?

[Dan Hollis]

On Sun, 26 Dec 2004, Stuart Low wrote:
> > Is there any chance of backporting the fixes to php 4.1?
> > An upgrade from 4.1 -> 4.3 is pretty traumatic (all the cross dependent 
> > packages, etc.)
> Err.. Install yum?

I've had yum installed for years now...

> Seriously man, that'll resolve your issues.
> If it's your application that's failing, I've already covered my
> disagreement with backporting packages for lagging applications.
> Stuart

Have all the cross dependent php packages been recompiled too?
php-imap, php-snmp, php-mysql, php-ldap, etc?

I do have seekbrain in my yum.conf, but 'yum update' and 'yum list 
updates' doesnt list any php updates available.

[seekbrain]
name=Seekbrain.com Updates for $releasever
baseurl=http://www.seekbrain.com/downloads/psa/$releasever/

# yum list updates
Gathering package information from servers
Getting headers from: Red Hat Linux 7.3 base
Getting headers from: Fedora Legacy utilities for Red Hat Linux 7.3
Getting headers from: Seekbrain.com Updates for 7.3
Getting headers from: Red Hat Linux 7.3 updates
Getting headers from: Red Hat Linux 7.3 updates-testing
Finding updated packages
Downloading needed headers
Name                                     Arch       Version
--------------------------------------------------------------------------------
[...]
perl-suidperl                            i386       5.6.1-36.1.73
pidentd                                  i386       3.0.14-5
[...]

no php!

My current php is:

$ rpm -qi php
Name        : php                          Relocations: (not relocateable)
Version     : 4.1.2                             Vendor: Fedora Legacy
Release     : 7.3.10.legacy                 Build Date: Thu 30 Sep 2004 06:59:24 PM PDT
Install date: Wed 13 Oct 2004 04:20:05 PM PDT      Build Host: jane.fedoralegacy.org
Group       : Development/Languages         Source RPM: php-4.1.2-7.3.10.legacy.src.rpm
Size        : 4296320                          License: The PHP License, version 2.02

I also notice that no php packages are listed in
http://www.seekbrain.com/downloads/psa/7.3/ when I browse it.

-Dan