I'd like to apply the latest security patches ...

one of them is OS update 2.0 which contains PHP 4.0.3

on my server PHP 4.0.5 is installed ... I've installed this manually using instructions provided on this forum ...

my question is: what will happen to my current php config ?

I see there is another PKG to update PHP to version 4.0.6 and that there's a warning: "This Update installs PHP version 4.0.6-C4. If you have upgraded PHP through a means other then packages from this website, your changes will be overwritten."

what does it mean exactly ? what will I "lose" ?

You will lose your custom PHP. You will need to re-install your custom PHP after you install the cobalt patches.

Brandon

You would be advised to upgrade PHP to 4.2.* as there were a number of security issues with previous releases.
Most libraries can be installed and built without difficulty.
The only one that causes real problems is GD, as some of the pkgs contained support for GIFs, while the official GD library no longer supports this.

In August...

The folks at Sun let us know there is a security issue with php on almost every raq made....

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/46724

Have they posted the fix yet? Does it always take several months for a security fix?

Am I expecting too much? I have a raq 4i and a new raq 500

Mark

If you want to have a safe version of PHP and some of the other daemons etc., you will have to install them from source.

Sun will probably release an upgrade at some stage, but in the meantime your server will be vulnerable.

Installing php isnt that hard :) there are some pretty good howto files on the net. If you stick to basic config your install will be painless on a raq4 on a 5 however there are some more problems but there are one or more good work arounds available.

Just seach the net havent it available right now here.

HTH Robbert.

Ps. Check raqfaq and modify it to your needs.