Mailing List Archive

updated GLSA 200605-08 & php-4.4.3-r1 & EMT64
Hi List!

Continuing the previous GLSA thread:

I have an EMT64 system, and I don't want to spend the time right now to find out if the GLSA is wrong or if the system is affected.

I don't think so according to the announcement.

I have only latest php4 installed (dev-lang/php-4.4.3-r1) and blocking php5 via package.mask.

Thanks for the info! If needed I can paste emerge --info, I wanted to keep this short...

Regards,
Lorand Kelemen

--
gentoo-security@gentoo.org mailing list
Re: updated GLSA 200605-08 & php-4.4.3-r1 & EMT64 [ In reply to ]
Loránd Kelemen:
>
> I have only latest php4 installed (dev-lang/php-4.4.3-r1) and blocking php5 via package.mask.
>
Supposedly, that version is not affected by this bug.
The GLSA was supposed to be fixed to reflect this.
At least that is what I was told in #gentoo-php.

Greetings,

Jonas
--
gentoo-security@gentoo.org mailing list
RE: updated GLSA 200605-08 & php-4.4.3-r1 & EMT64 [ In reply to ]
Hi Jonas,

I synced this morning ... (from gentoo.inode.at as far as I remember)

So maybe that would need some more checks...

Regards,
Lorand Kelemen

-----Original Message-----
From: Jonas Fietz [mailto:info@jonasfietz.de]
Sent: Monday, September 04, 2006 3:28 PM
To: gentoo-security@lists.gentoo.org
Subject: Re: [gentoo-security] updated GLSA 200605-08 & php-4.4.3-r1 &
EMT64


Loránd Kelemen:
>
> I have only latest php4 installed (dev-lang/php-4.4.3-r1) and blocking php5 via package.mask.
>
Supposedly, that version is not affected by this bug.
The GLSA was supposed to be fixed to reflect this.
At least that is what I was told in #gentoo-php.

Greetings,

Jonas
--
gentoo-security@gentoo.org mailing list


--
gentoo-security@gentoo.org mailing list
Re: updated GLSA 200605-08 & php-4.4.3-r1 & EMT64 [ In reply to ]
Hi Lorand,

GLSA 200605-08 [1] was updated (again) Saturday to reflect that 4.4.3-r1 is
unaffected on all architectures.

[1] http://www.gentoo.org/security/en/glsa/glsa-200605-08.xml

On Monday 04 September 2006 16:32, Loránd Kelemen wrote:
> Hi Jonas,
>
> I synced this morning ... (from gentoo.inode.at as far as I remember)
>
> So maybe that would need some more checks...
>
> Regards,
> Lorand Kelemen
>
> -----Original Message-----
> From: Jonas Fietz [mailto:info@jonasfietz.de]
> Sent: Monday, September 04, 2006 3:28 PM
> To: gentoo-security@lists.gentoo.org
> Subject: Re: [gentoo-security] updated GLSA 200605-08 & php-4.4.3-r1 &
> EMT64
>
> Loránd Kelemen:
> > I have only latest php4 installed (dev-lang/php-4.4.3-r1) and blocking
> > php5 via package.mask.
>
> Supposedly, that version is not affected by this bug.
> The GLSA was supposed to be fixed to reflect this.
> At least that is what I was told in #gentoo-php.
>
> Greetings,
>
> Jonas
> --
> gentoo-security@gentoo.org mailing list

--
Sune Kloppenborg Jeppesen
Gentoo Linux Security Team
RE: updated GLSA 200605-08 & php-4.4.3-r1 & EMT64 [ In reply to ]
Re,

I knew about that update, all I say is after emerging php-4.4.3-r1
glsa-check still shows that the system is affected. PHP5 is blocked via package.mask, it's not installed.

So there must be sg. wrong with the glsa, as in the previous topic.

Regards,
Lorand


-----Original Message-----
From: Sune Kloppenborg Jeppesen [mailto:jaervosz@gentoo.org]
Sent: Monday, September 04, 2006 7:31 PM
To: gentoo-security@lists.gentoo.org
Subject: Re: [gentoo-security] updated GLSA 200605-08 & php-4.4.3-r1 & EMT64

Hi Lorand,

GLSA 200605-08 [1] was updated (again) Saturday to reflect that 4.4.3-r1 is
unaffected on all architectures.

[1] http://www.gentoo.org/security/en/glsa/glsa-200605-08.xml

On Monday 04 September 2006 16:32, Loránd Kelemen wrote:
> Hi Jonas,
>
> I synced this morning ... (from gentoo.inode.at as far as I remember)
>
> So maybe that would need some more checks...
>
> Regards,
> Lorand Kelemen
>
> -----Original Message-----
> From: Jonas Fietz [mailto:info@jonasfietz.de]
> Sent: Monday, September 04, 2006 3:28 PM
> To: gentoo-security@lists.gentoo.org
> Subject: Re: [gentoo-security] updated GLSA 200605-08 & php-4.4.3-r1 &
> EMT64
>
> Loránd Kelemen:
> > I have only latest php4 installed (dev-lang/php-4.4.3-r1) and blocking
> > php5 via package.mask.
>
> Supposedly, that version is not affected by this bug.
> The GLSA was supposed to be fixed to reflect this.
> At least that is what I was told in #gentoo-php.
>
> Greetings,
>
> Jonas
> --
> gentoo-security@gentoo.org mailing list

--
Sune Kloppenborg Jeppesen
Gentoo Linux Security Team

--
gentoo-security@gentoo.org mailing list
Re: updated GLSA 200605-08 & php-4.4.3-r1 & EMT64 [ In reply to ]
On Monday 04 September 2006 20:47, Loránd Kelemen wrote:
> Re,
>
> I knew about that update, all I say is after emerging php-4.4.3-r1
> glsa-check still shows that the system is affected. PHP5 is blocked via
> package.mask, it's not installed.
>
> So there must be sg. wrong with the glsa, as in the previous topic.

I think the GLSA is correct but it might be that glsa-check is confused by all
the arch stuff so I reopend the bug [1].

[1] https://bugs.gentoo.org/show_bug.cgi?id=145104

--
Sune Kloppenborg Jeppesen
Gentoo Linux Security Team