AW: [cobalt-developers] PHP security issue

["Andres Petralli" <a.petralli@xxxxxxxxxx>]

Hi Gerrit,

I have built an update by myself and compiled it as a nice *.pkg file
including lots of libraries and functions for LDAP, Imap4, PDF,
Freetype, GD 1.8.4 and lots more. The PHP version is 4.1.2. Take a look
at 
ftp://ftp.cobalthosting.ch/pub/optional/RaQ3-PHP-4.1.2-1.pkg . 
I don't give any warranty on that update, but to my knowledge it should
be very cleanly compiled and also cleanly installed as nice module to a
standard Cobalt Apache installation.

Let me know if everything works fine!

Greets,

Andres Petralli - Arpanet AG

> -----Ursprüngliche Nachricht-----
> Von: Gerrit Ruesing [mailto:gerrit@xxxxxxxxxxxx]
> Gesendet: Freitag, 1. März 2002 14:31
> An: cobalt-developers@xxxxxxxxxxxxxxx
> Betreff: [cobalt-developers] PHP security issue
> 
> 
> Hello,
> 
> I'm more than slightly concerned about the security issue
> of PHP ( http://www.php.net) . I definately want to avoid a
> global havoc like MS IIS and
> waste the good reputation of apache/ Linux/ PHP as a
> secure webserver system altogether.
> 
> I'm planning to patch it tonight but I would be much
> happier if cobalt / pkg.nl.cobalt.com could come up
> with an easier solution especially because not all
> participants in this group or others will be capable
> of doing what is necessary (patching & recompiling).
> 
> Is there a way?
> - Gerrit
> 
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers
>