[php-maint] Re: packages for sarge?

Steve Langasek vorlon at debian.org
Fri Aug 26 08:45:08 UTC 2005

On Fri, Aug 26, 2005 at 10:21:02AM +0200, Martin Schulze wrote:
> Adam Conrad wrote:
> > Indeed, the regular debian/patches mechanism handles anything ending in
> > *.patch, and patches before build.  Unfortunately, the PEAR stuff is
> > contained in tarballs in the source, and isn't really patchable until
> > after it's been extracted and installed in debian/*, so I hacked this
> > up.  With any luck, there won't be many more PEAR vulns (these were the
> > first two we've ever had to patch for).

> Can you tell me the version in sid that fixes these problems?

php4 4:4.4.0-1 includes the fix for CAN-2005-0921.  Bug #323366 for
CAN-2005-2498 is still open; Adam, do you know if this is also fixed in
4.4.0-1, or do I need to dig?

CAN-2005-1751 and CAN-2005-1759 have also been fixed in php4 4:4.4.0-1,
because upstream's version of shtool is no longer shipped in php4-dev
(php4-dev now depends on the shtool package instead).

Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-php-maint/attachments/20050826/05f9e2d9/attachment.pgp

More information about the pkg-php-maint mailing list