PHP vulnerabilities?

Chris Mason lists at masonc.com
Sat Jan 1 19:16:10 UTC 2005


Building from that SROM worked beautifully for me, now I'm able to sleep
(until the next expoit)...

Chris Mason


> -----Original Message-----
> From: fedora-legacy-list-bounces at redhat.com 
> [mailto:fedora-legacy-list-bounces at redhat.com] On Behalf Of 
> Dan Trainor - hostinthebox.net
> Sent: Tuesday, December 28, 2004 6:30 PM
> To: Discussion of the Fedora Legacy Project
> Subject: Re: PHP vulnerabilities?
> 
> 
> 
> 
> Dan Hollis wrote:
> > Stuart Low <stuart serverpeak com> wrote:
> > 
> >>I've been tardy in uploading the compiled RPMs (due to the Christmas
> >>break). The source RPM that's there will recompile happily 
> though so you
> >>should be able to do rpmbuild --rebuild 
> php-4.3.10.sp.src.rpm and end up
> >>with the subpackages.
> >>[For RH7.3 you can grab and rebuild
> >>http://au.seekbrain.com/downloads/psa/BUILD/php-4.3.10-
> >>sp.rh73.1.src.rpm]
> > 
> > 
> > # rpmbuild --rebuild php-4.3.10-sp.rh73.1.src.rpm 
> > Installing php-4.3.10-sp.rh73.1.src.rpm
> > error: failed build dependencies:
> >         libmcrypt is needed by php-4.3.10-sp.rh73.1
> >         libmcrypt-devel is needed by php-4.3.10-sp.rh73.1
> > 
> > I am having a rather hard time finding a libmcrypt rpm 
> which will install,
> > let alone compile on rh7.3. I found a nice libmcrypt srpm 
> which wants
> > autoconf 2.50, which of course does not exist on rh7.3. All 
> the binary
> > libmcrypt rpms i've found want glibc2.3, which again does 
> not exist on
> > rh7.3.
> > 
> > What's an exact url for a libmcrypt binary rpm for rh7.3?
> > 
> > -Dan
> > 
> 
> Alright, so...  I'm going to have some free time here, and although I 
> don't usually contribute to the RH7.3 tree, I'm going to give this a 
> shot and see how it goes.  The only thing that I can think of 
> that would 
> get this to work is if it's compiled in a static form.  Is this 
> acceptable?  If not, I might just do it here to say that I 
> did it, heh.
> 
> Thanks
> -dant
> 
> --
> fedora-legacy-list mailing list
> fedora-legacy-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-legacy-list
> 
> 
> -- 
> No virus found in this incoming message.
> Checked by AVG Anti-Virus.
> Version: 7.0.296 / Virus Database: 265.6.6 - Release Date: 12/28/2004
>  
> 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.296 / Virus Database: 265.6.7 - Release Date: 12/30/2004
 




More information about the fedora-legacy-list mailing list