Re: [CentOS] PHP 5.2.5 when ?

2008-01-15 Thread Johnny Hughes
Santa Claus wrote: Hi Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? 1. download form php.net + make ... etc. 2. or go search rpms/rpm in private repositories ? I would personally recommend that you not do it at all ... if you want cutti

Re: [CentOS] PHP 5.2.5 when ?

2008-01-14 Thread Michael A. Peters
Santa Claus wrote: Hi Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? 1. download form php.net + make ... etc. 2. or go search rpms/rpm in private repositories I've got them here - but absolutely no support whatsoever. htt

Re: [CentOS] PHP 5.2.5 when ?

2008-01-14 Thread Mark Weaver
Santa Claus wrote: Hi Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? 1. download form php.net + make ... etc. 2. or go search rpms/rpm in private repositories ? you can get what you want with this repo info: [dag] name=D

Re: [CentOS] PHP 5.2.5 when ?

2008-01-14 Thread Mark Weaver
On Mon, 14 Jan 2008 11:10:17 +0100 Ralph Angenendt <[EMAIL PROTECTED]> wrote: > Mark Weaver wrote: > > I personally can think of no reason at all for php-cli. > > php-pear needs it. Why php itself depends on it isn't clear to me > either. > > Cheers, > > Ralph that in and of itself

Re: [CentOS] PHP 5.2.5 when ?

2008-01-14 Thread Anup Shukla
John R Pierce wrote: Anup Shukla wrote: Jim Perrin wrote: Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? There is no "correct" method for this, there are only "less wrong" ways to do it. 1. download form php.net + make ... etc. No

Re: [CentOS] PHP 5.2.5 when ?

2008-01-14 Thread Ralph Angenendt
Mark Weaver wrote: > I personally can think of no reason at all for php-cli. php-pear needs it. Why php itself depends on it isn't clear to me either. Cheers, Ralph pgpuU6IlDt1zV.pgp Description: PGP signature ___ CentOS mailing list CentOS

Re: [CentOS] PHP 5.2.5 when ?

2008-01-14 Thread John R Pierce
Anup Shukla wrote: Jim Perrin wrote: On Jan 13, 2008 1:53 PM, Santa Claus <[EMAIL PROTECTED]> wrote: Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? There is no "correct" method for this, there are only "less wrong" ways to do it. 1.

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Anup Shukla
Jim Perrin wrote: On Jan 13, 2008 1:53 PM, Santa Claus <[EMAIL PROTECTED]> wrote: Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? There is no "correct" method for this, there are only "less wrong" ways to do it. 1. download form php.ne

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Sun, 13 Jan 2008 22:19:51 -0500 "Jim Perrin" <[EMAIL PROTECTED]> wrote: > On Jan 13, 2008 9:59 PM, Karanbir Singh <[EMAIL PROTECTED]> wrote: > > > I recommend rsyslog! > > Well okay, now you've drawn me out! > > I've been playing with rsyslog recently in the hopes of creating the > 'one moni

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Mon, 14 Jan 2008 02:59:38 + Karanbir Singh <[EMAIL PROTECTED]> wrote: > Mark Weaver wrote: > > yeah... and the one that was possibly part of the problem is now > > gone. I never restored it from backup after the second breach. The > > perps were trying after the second reload, but since tha

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Karanbir Singh
Jim Perrin wrote: without any of the dual licensing bits. It'll also soon have native ssl handling for secure log transfer. It's very sexy. I second Karanbir's recommendation to take a look at rsyslog. am in the process of bringing that into centosplus :D -- Karanbir Singh CentOS Project { ht

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Jim Perrin
On Jan 13, 2008 9:59 PM, Karanbir Singh <[EMAIL PROTECTED]> wrote: > I recommend rsyslog! Well okay, now you've drawn me out! I've been playing with rsyslog recently in the hopes of creating the 'one monitoring server to rule them all' with logging, nagios, ibm director, etc. It seems the fedora

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Karanbir Singh
Mark Weaver wrote: yeah... and the one that was possibly part of the problem is now gone. I never restored it from backup after the second breach. The perps were trying after the second reload, but since that web site wasn't restored and running on the web server they weren't able to get in. no

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Sun, 13 Jan 2008 21:22:20 -0500 Chris Mauritz <[EMAIL PROTECTED]> wrote: > Mark Weaver wrote: > > "The only other apps that were on the system at the time was a php > web site and forum." > > --- > > Heh. Yep, those PHP web forums have a squeaky clean track record. > > *rolling eyes* > y

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Mon, 14 Jan 2008 02:31:28 + Karanbir Singh <[EMAIL PROTECTED]> wrote: > Mark Weaver wrote: > > while I understand why you'd like proof of concept for the exploit > > it's not something I'd post on a public mailing list. Not to > > mention the exploit was trashed when I reloaded the system.

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Karanbir Singh
Mark Weaver wrote: while I understand why you'd like proof of concept for the exploit it's not something I'd post on a public mailing list. Not to mention the exploit was trashed when I reloaded the system. At the time it didn't seem expedient for to save that which killed my server for posterity

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Chris Mauritz
Mark Weaver wrote: "The only other apps that were on the system at the time was a php web site and forum." --- Heh. Yep, those PHP web forums have a squeaky clean track record. *rolling eyes* ___ CentOS mailing list CentOS@centos.org http://lis

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Sun, 13 Jan 2008 16:25:15 -0800 Ray Van Dolson <[EMAIL PROTECTED]> wrote: > On Sun, Jan 13, 2008 at 02:14:04PM -0500, Mark Weaver wrote: > > those patches didn't do much for keeping one of my systems from > > being breached via php. from the looks of the web server logs as > > well as the messa

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Mon, 14 Jan 2008 00:15:27 + Karanbir Singh <[EMAIL PROTECTED]> wrote: > Mark Weaver wrote: > > those patches didn't do much for keeping one of my systems from > > being breached via php. from the looks of the web server logs as > > well as the messages log file that's where they got in. >

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Ray Van Dolson
On Sun, Jan 13, 2008 at 02:14:04PM -0500, Mark Weaver wrote: > those patches didn't do much for keeping one of my systems from being > breached via php. from the looks of the web server logs as well as the > messages log file that's where they got in. > > being the anul sort I am I first thought t

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Karanbir Singh
Mark Weaver wrote: those patches didn't do much for keeping one of my systems from being breached via php. from the looks of the web server logs as well as the messages log file that's where they got in. I am still waiting for you to post some demonstrate-able exploit in the distro supplied ph

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Sun, 13 Jan 2008 14:25:36 -0500 (EST) Joshua Baker-LePain <[EMAIL PROTECTED]> wrote: > On Sun, 13 Jan 2008 at 8:03am, Mark Weaver wrote > > > On Fri, 11 Jan 2008 04:05:56 -0600 > > Johnny Hughes <[EMAIL PROTECTED]> wrote: > > >> ummm ... the answer is probably never. > >> > >> Red Hat offers

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Barry Brimer
Even an exteremely brief search of the archives of this list would turn up tons of similar questions, and the same answer every time -- Red Hat backports security fixes to the stable version of packages in their Enterprise distro. That's why, e.g., for it's entire 5 year supported life, RHEL5

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Joshua Baker-LePain
On Sun, 13 Jan 2008 at 8:03am, Mark Weaver wrote On Fri, 11 Jan 2008 04:05:56 -0600 Johnny Hughes <[EMAIL PROTECTED]> wrote: ummm ... the answer is probably never. Red Hat offers a RHWAS ... that has a php5 for EL4. The version of php in there (and in our CentOSPlus repo) is php-5.1.6 ... i

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Jim Perrin
On Jan 13, 2008 1:53 PM, Santa Claus <[EMAIL PROTECTED]> wrote: > Thanks to all who responded. > But I repeat the question: > how to upgrade CentOS4 to PHP 5.2.5 correctly? There is no "correct" method for this, there are only "less wrong" ways to do it. > 1. download form php.net + make ... et

[CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Santa Claus
Hi Thanks to all who responded. But I repeat the question: how to upgrade CentOS4 to PHP 5.2.5 correctly? 1. download form php.net + make ... etc. 2. or go search rpms/rpm in private repositories ? -- wbr ___ CentOS mailing list CentOS@centos.org http:

Re: [CentOS] PHP 5.2.5 when ?

2008-01-13 Thread Mark Weaver
On Fri, 11 Jan 2008 04:05:56 -0600 Johnny Hughes <[EMAIL PROTECTED]> wrote: > Santa Claus wrote: > > Hi > > > > When (some) expected rpm package for the upgrade php to version > > 5.2.5(CentOS4) ? Who knows? > > ummm ... the answer is probably never. > > Red Hat offers a RHWAS ... that has a ph

Re: [CentOS] PHP 5.2.5 when ?

2008-01-12 Thread John R Pierce
Santa Claus wrote: It is not clear why Red Hat (and CentOS too), so weak responds to changes of important packages. In this case the question: how to upgrade to PHP 5.2.5 correctly? If its really not clear, you're totally missing the whole *point* of RHEL. ___

[CentOS] PHP 5.2.5 when ?

2008-01-12 Thread Santa Claus
Hi >> When (some) expected rpm package for the upgrade php to version 5.2.5(CentOS4) ? >ummm ... the answer is probably never. It is not clear why Red Hat (and CentOS too), so weak responds to changes of important packages. In this case the question: how to upgrade to PHP 5.2.5 correctly? 1. mak

Re: [CentOS] PHP 5.2.5 when ?

2008-01-11 Thread Johnny Hughes
Santa Claus wrote: Hi When (some) expected rpm package for the upgrade php to version 5.2.5(CentOS4) ? Who knows? ummm ... the answer is probably never. Red Hat offers a RHWAS ... that has a php5 for EL4. The version of php in there (and in our CentOSPlus repo) is php-5.1.6 ... it might go

[CentOS] PHP 5.2.5 when ?

2008-01-11 Thread Santa Claus
Hi When (some) expected rpm package for the upgrade php to version 5.2.5(CentOS4) ? Who knows? -- wbr ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos