Testing patch for 4.0.6
| From: | Chris Mason | Date: | Fri, 01 Mar 2002 00:10:26 +0000 |
| Subject: | Testing patch for 4.0.6 | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-86687@lists.php.net to get a copy of this message | ||
I am using 4.0.6 as a apache module in a redhat server, compiling the src
rpm with a couple of custom commands in the spec file. I can't upgrade to a
newer version due to changes in the xmltree() function that breaks some of
my projects.
With the recent vunerability, I needed to generate a patched version. I ran
rpm -Uvh on the src rpm, then
rpm -bp to clean up
vi php-4.06.spec
and changed the version number,
made a couple of changes
saved the spec file
cd to /usr/src/redhat/BUILD/php-4.0.6/main
cp /root/rfc1867.c.diff-4.0.6.gz .
patch -p0 rfc1867.c rfc1867.c.diff-4.0.6.gz
cd /usr/src/redhat/SPEC
rpm -bb --short-circuit php-4.0.6.spec
cd ../RPM/i386
rpm -Uvh php-4.0.6.cm.i386.rpm
/etc/init.d/httpd restart
Apache works fine, I have a patched server....or do I?
How can I check I have actually fixed it?
Is there a test i can run. I don;t need the whole exploit, I don't think,
just some kind of test.
Chris Mason
masonc@masonc.com
Box 340, The Valley, Anguilla, British West Indies
Tel: 264 497 5670 Fax: 264 497 8463
Take a virtual tour of the island
http://www.anguillaguide.com/ The Anguilla Guide
Find your perfect rental villa www.mycaribbean.com
Talk to me in real time:
MSN Instant Messenger: masonc92@hotmail.com
ICQ 118159388 Yahoo:netconcepts_anguilla
US Fax and Voicemail: (605)253-1759