On Wed, Mar 12, 2003, Ingo T. Storm wrote:

> mod_php is in the OpenPKG apache package. (as is mod_ssl and the
> like). This means that when any of the packages contained has an
> update, the "container package" will have to be updated. This is the
> reason why you see both apache and the standalone php package in the
> advisory.

Some clarification. The advisory is only for the standalone php interpreter
(being used as a CGI) but not for the embedded apache module.

The apache package is supposed to build only the apache module (assuming
you specify the 'with_php' option) and thus would not be affected.

However, due to some oversight from us, some versions of the apache
package also build the affected standalone php interpreter (-> the
php build now requires an explicit --disable-cli to prevent the php
interpreter from begin built :-().

So: if you had installed the listed apache package and built it with
the 'with_php' option, then you also installed the php binary that
is affected when being used as a CGI.


Greetings,
-- 
    ,eM""=.            a"-.                         Michael van Elst
   dWWMWM" -          :GM==;                        [EMAIL PROTECTED]
  :WWMWMw=--.          "W='  cable & wireless
   9WWMm==-.
    "-Wmw-"  CABLE & WIRELESS
______________________________________________________________________
The OpenPKG Project                                    www.openpkg.org
User Communication List                      [EMAIL PROTECTED]

Reply via email to