On Wed, Mar 12, 2003, Ingo T. Storm wrote: > mod_php is in the OpenPKG apache package. (as is mod_ssl and the > like). This means that when any of the packages contained has an > update, the "container package" will have to be updated. This is the > reason why you see both apache and the standalone php package in the > advisory.
Some clarification. The advisory is only for the standalone php interpreter (being used as a CGI) but not for the embedded apache module. The apache package is supposed to build only the apache module (assuming you specify the 'with_php' option) and thus would not be affected. However, due to some oversight from us, some versions of the apache package also build the affected standalone php interpreter (-> the php build now requires an explicit --disable-cli to prevent the php interpreter from begin built :-(). So: if you had installed the listed apache package and built it with the 'with_php' option, then you also installed the php binary that is affected when being used as a CGI. Greetings, -- ,eM""=. a"-. Michael van Elst dWWMWM" - :GM==; [EMAIL PROTECTED] :WWMWMw=--. "W=' cable & wireless 9WWMm==-. "-Wmw-" CABLE & WIRELESS ______________________________________________________________________ The OpenPKG Project www.openpkg.org User Communication List [EMAIL PROTECTED]