[lug] Where to get security-patched rpms?

[Bill Thoen]

On Sat, 24 Jul 2004, Matt Thompson wrote:

> They currently have ended support for RH 7.2 and 8.0, but they are still 
> doing 9.0.  They have php-*-4.2.2-17.2 right now with a date of 
> 01-Jul-2003, so I'm not sure PHP themselves care about it.  It could be 
> non-maintained.
> 
> So, the next thing to do is to get 4.3.8, which has been patched very 
> recently.  Stuart Low, who does MySQL, PHP, httpd, et al., has packaged 
> it for RH 9 (and many others):
> 
> http://www.redhat.com/archives/fedora-legacy-list/2004-July/msg00076.html

Well, I tried Stuart Low's SRPM, but when I tried to rebuild it, it 
complained about lots of missing dependencies. Several of these aren't 
even in the RH 9 distro. 

Having found with an earlier RPM that you can configure, make and make
install the source code directly and ignore these dependencies, I unpacked
the source and tried to apply the patches manually. Several (but not all)
failed with "hunk" errors.

Did I miss a step or two trying to apply patches by hand (I used patch
-Np1 -i <patch-file>) or does the rpmbuild program do something different
that would cause the patches to work?

- Bill Thoen