|
|
 |
|
|
Changelog for php7-fastcgi-7.3.2-206.2.x86_64.rpm :
Wed Feb 13 13:00:00 2019 Petr Gajdos
- updated to version 7.3.2: This is a bugfix release, with several
bug fixes included. See
http://php.net/ChangeLog-7.php#7.3.2
- php7-systzdata-v16.patch modified and renamed to
php7-systzdata-v17.patch
Thu Feb 7 13:00:00 2019 Petr Gajdos
- set pcre.jit=0 until https://bugs.php.net/bug.php?id=77260
is solved [bsc#1124446]
Thu Jan 31 13:00:00 2019 Arjen de Korte
- spec file cleanup
* add BuildRequires gpg2
* remove outdated README.SUSE-pear - Squirrelmail uses PDO instead
of DB now by default
* remove outdated php7-depdb-path.patch - Horde packages no longer
build so need to be fixed anyway
- update php7.rpmlintrc to suppress warnings that aren\'t fixable and
drown out other warnings
Wed Jan 30 13:00:00 2019 Arjen de Korte
- provide the version of PEAR, rather than the PHP version in php-pear
Wed Jan 30 13:00:00 2019 Arjen de Korte
- configure cache_dir, metadata_dir and sig_bin through PHP_PEAR_
*
exports
Tue Jan 29 13:00:00 2019 Arjen de Korte
- remove install-pear-nozlib.phar (the bundled and tested version from
the PHP sources is fresh enough for our purposes)
- merge back php7-pear-Archive_Tar in php7-pear
- rename cache_dir to pear and create it
Tue Jan 22 13:00:00 2019 Arjen de Korte
- fix php7.spec typos
Tue Jan 22 13:00:00 2019 Petr Gajdos
- verify install-pear-nozlib.phar
Tue Jan 22 13:00:00 2019 Arjen de Korte
- update install-pear-nozlib.phar to version 1.10.10
* switch source to GitHub
* provides Archive_Tar 1.4.4 (fixes CVE-2018-1000888)
Mon Jan 14 13:00:00 2019 Petr Gajdos
- update to 7.3.1: This is a security release which also contains
several bug fixes. See
http://php.net/ChangeLog-7.php
- remove suhosin stuff
Sun Dec 30 13:00:00 2018 Cristian Rodríguez
- Support LMDB in php7-dba, it is advisable to use it instead
of bdb.
Thu Dec 20 13:00:00 2018 Cristian Rodríguez
- Update php7-pts.patch: open slave_pty using TIOCGPTPEER if available
instead of the name returned by ptsname() so it is safe to use when
interacting with namespaces.
Thu Dec 20 13:00:00 2018 Cristian Rodríguez
- update install-pear-nozlib.phar to its latest version, otherwise
pecl stops working due to protocol switch http -> https
Wed Dec 19 13:00:00 2018 Martin Pluskal
- Mark testresults package as noarch
Thu Dec 13 13:00:00 2018 Martin Pluskal
- Enable testsuite during build time and save log to subpackage
testresults (boo#1119396)
Mon Dec 10 13:00:00 2018 Cristian Rodríguez
- update to pcre2 broke building third party modules, php7-devel
needs pcre-devel --> pcre2-devel change.
Mon Dec 10 13:00:00 2018 Petr Gajdos
- update to 7.3.0:
* Improved PHP GC
* Add net_get_interfaces()
* Implemented flexible heredoc and nowdoc syntax
* Added support for references in list() and array destructuring
* Added syslog.facility and syslog.ident INI entries for
customizing syslog logging
* The declaration and use of case-insensitive constants has been
deprecated
* Added syslog.filter INI entry for syslog filtering
* Added the \'add_slashes\' sanitization mode
* Added support for WebP in imagecreatefromstring()
* Export internal structures and accessor helpers for GMP object.
* Added gmp_binomial(n, k)
* Added gmp_lcm(a, b)
* Added gmp_perfect_power(a)
* Added gmp_kronecker(a, b)
* Added JSON_THROW_ON_ERROR flag
* Added ldap_exop_refresh helper for EXOP REFRESH operation with
dds overlay
* Added full support for sending and parsing ldap controls
* Removed support for ODBCRouter
* Removed support for Birdstep
* Added openssl_pkey_derive function
* Add min_proto_version and max_proto_version ssl stream options
as well as related constants for possible TLS protocol values
* Migrated to PCRE2
* Expose TDS version as \\PDO::DBLIB_ATTR_TDS_VERSION attribute
on \\PDO instance
* Treat DATETIME2 columns like DATETIME
* Added is_countable() function
* Added support for the SameSite cookie directive, including an
alternative signature for setcookie(), setrawcookie() and
session_set_cookie_params()
* Many bugfixes and other changes, see
http://php.net/ChangeLog-7.php#7.3.0
- patch changes
% php7-ini.patch
% php7-no-build-date.patch
% php7-odbc-cmp-int-cast.patch
- php7-honor-re2c-flags.patch (upstreamed)
Mon Dec 10 13:00:00 2018 Petr Gajdos
- update to 7.2.13: This is a security release.
http://php.net/ChangeLog-7.php
Fri Nov 16 13:00:00 2018 Petr Gajdos
- core package recommends instead of requires smtp_daemon
[bsc#1115213]
Fri Nov 9 13:00:00 2018 Petr Gajdos
- update to 7.2.12: This is a bugfix release.
http://php.net/ChangeLog-7.php
- forward ported:
% php7-crypt-tests.patch
% php7-honor-re2c-flags.patch
% php7-odbc-cmp-int-cast.patch
Mon Oct 15 14:00:00 2018 Petr Gajdos
- update to 7.2.11: This is a bugfix release.
http://php.net/ChangeLog-7.php
Mon Sep 17 14:00:00 2018 Petr Gajdos
- updated to 7.2.10: This is a security release which also contains
several minor bug fixes.
http://php.net/ChangeLog-7.php
Mon Sep 17 14:00:00 2018 Petr Gajdos
- reenable php7-dba support of Berkeley DB [bsc#1108554]
Tue Sep 11 14:00:00 2018 Petr Gajdos
- remove Supplements: packageand(%{apache_mmn}:%{name}) from
Apache httpd module as I do not see the reason why system
that have php7 and apache2 installed should get the module
automatically as well. This had a drawback of selecting
apache2-prefork while
[#] zypper in apache2-worker
The following 5 NEW packages are going to be installed:
apache2 apache2-mod_php7 apache2-prefork apache2-utils apache2-worker
[#]
because apache2-mod_php7 Requires: apache2-prefork.
Fri Aug 17 14:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.9: This is a bugfix release.
http://php.net/ChangeLog-7.php
Fri Aug 3 14:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.8: This is a security release which also contains
several minor bug fixes.
http://php.net/ChangeLog-7.php#7.2.8
Tue Jun 26 14:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.7: A Bugfix release which includes a segfault fix
for opcache.
http://php.net/ChangeLog-7.php#7.2.7
Thu Jun 7 14:00:00 2018 pgajdosAATTsuse.com
- actually build against system gd for 42.3, made a bold comment
[bsc#1074025c#5]
Tue May 29 14:00:00 2018 pgajdosAATTsuse.com
- fix build for SLE12, where %license does not exist
Tue May 29 14:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.6: Bugfix release which includes a memory
corruption fix for EXIF.
http://php.net/ChangeLog-7.php#7.2.6
Fri May 25 14:00:00 2018 idonmezAATTsuse.com
- Remove php7-freetype-pkgconfig.patch as it seems to break
Freetype detection on some systems bsc#1094534
Tue May 15 14:00:00 2018 pgajdosAATTsuse.com
- main package requires wwwrun:www user [bsc#1093025]
Thu May 10 14:00:00 2018 pgajdosAATTsuse.com
- better workaround for [bsc#1089487]: build mod_phpN.so
instead of libphpN.so
Wed May 9 14:00:00 2018 pgajdosAATTsuse.com
- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
to align with the rest of patch names
Mon May 7 14:00:00 2018 idonmezAATTsuse.com
- Add freetype-pkgconfig.patch to fix build with new Freetype:
use pkg-config to find Freetype libraries
Mon Apr 30 14:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.5: This is a security release which also contains
several minor bug fixes.
http://php.net/ChangeLog-7.php#7.2.5
Thu Apr 19 14:00:00 2018 pgajdosAATTsuse.com
- build-test.sh: generic spec file name
Mon Apr 16 14:00:00 2018 pgajdosAATTsuse.com
- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]
Wed Apr 4 14:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.4: This is a security release with also contains
several minor bug fixes.
http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed
Mon Mar 26 14:00:00 2018 pgajdosAATTsuse.com
- build firebird extension only for openSUSE (sle15 requirement)
Tue Mar 20 13:00:00 2018 guillaume.gardetAATTopensuse.org
- Fix build for %arm and aarch64
Fri Mar 16 13:00:00 2018 pgajdosAATTsuse.com
- drop imap extension [bsc#1084461]
Sat Mar 10 13:00:00 2018 dimstarAATTopensuse.org
- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
is moving to version 2.2, with an enchant-1 as compatibility
package. By using the pkgconfig symbol, we don\'t have to care for
the actual package name.
Fri Mar 9 13:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.3: This is a security release with also contains
several minor bug fixes.
http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
php7-systzdata-v16.patch
Thu Feb 22 13:00:00 2018 crrodriguezAATTopensuse.org
- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time
Thu Feb 22 13:00:00 2018 crrodriguezAATTopensuse.org
- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS
Thu Feb 22 13:00:00 2018 crrodriguezAATTopensuse.org
- Support password_hash(\"...\", PASSWORD_ARGON2I), buildrequire
libargon2 in supported products.
Mon Feb 19 13:00:00 2018 crrodriguezAATTopensuse.org
- Remove buildRequires on:
* libevent-devel: php7-fpm does not use it.
* pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
against system gd. xft likewise.
Mon Feb 19 13:00:00 2018 pgajdosAATTsuse.com
- fixed memory leak in pgsql extension, php function pg_escape_bytea
https://bugs.php.net/bug.php?id=75838
[bsc#1076970] (internal)
+ php7-pgsql-memory-leak.patch
Wed Feb 7 13:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.2: This is a bugfix release, with several bug
fixes included.
http://php.net/ChangeLog-7.php#7.2.2
Fri Jan 26 13:00:00 2018 pgajdosAATTsuse.com
- do not build against system gd when suse_version < 1500
Tue Jan 23 13:00:00 2018 pgajdosAATTsuse.com
- fix build for SLE12
*
Tue Jan 9 13:00:00 2018 pgajdosAATTsuse.com
- updated to 7.2.1: Several security bugs were fixed in this release.
http://php.net/ChangeLog-7.php#7.2.1
Tue Jan 2 13:00:00 2018 pgajdosAATTsuse.com
- build against newer webp [bsc#1074121]
Fri Dec 15 13:00:00 2017 pgajdosAATTsuse.com
- build with SLE12
*
Mon Dec 11 13:00:00 2017 pgajdosAATTsuse.com
- updated to 7.2.0: features and improvements:
* Convert numeric keys in object/array casts
* Counting of non-countable objects
* Object typehint
* HashContext as Object
* Argon2 in password hash
* Improve TLS constants to sane values
* Mcrypt extension removed
* New sodium extension
- patches:
. php7-systzdata-v14.patch transformed to php7-systzdata-v15.patch
. removed upstreamed php7-aarch64-mult.patch
Mon Nov 27 13:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.12: This is a bugfix release, with several bug
fixes included.
Wed Nov 1 13:00:00 2017 bluemer.markAATTgmail.com
- Add php-cli as provides to php7
Fri Oct 27 14:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.11: This is a bugfix release, with several bug
fixes included.
Wed Oct 4 14:00:00 2017 pgajdosAATTsuse.com
- fixed installation of wrong cli [bsc#1061555]
Sat Sep 30 14:00:00 2017 jengelhAATTinai.de
- Update not-so-useful repeated package summaries.
Update the descriptions to have a bit more explanation.
Replace old tar syntax.
Wed Sep 27 14:00:00 2017 pgajdosAATTsuse.com
- build and ship embed SAPI
+ php7-embed.patch
Wed Sep 27 14:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.10: Several bugs have been fixed, see
https://secure.php.net/ChangeLog-7.php
for details
Tue Sep 12 14:00:00 2017 pgajdosAATTsuse.com
- aarch64-mult.patch renamed to php7-aarch64-mult.patch
Mon Sep 4 14:00:00 2017 pgajdosAATTsuse.com
- php7-devel requires php7-pear [bsc#1057104]
Fri Sep 1 14:00:00 2017 jweberhoferAATTweberhofer.at
- Changes related to boo#1056822
- New packaging macros in macros.php: %php_pearxmldir,
%pear_phpdir, %pear_phpdir, %pear_testdir, %pear_datadir,
%pear_cfgdir, %pear_wwwdir, %pear_metadir, %pecl_phpdir,
%pecl_docdir, %pecl_testdir, %pecl_datadir
- Updated packaging documentation in README.macros
Thu Aug 31 14:00:00 2017 ilyaAATTilya.pp.ua
- Updated to 7.1.9: Several bugs have been fixed.
* ChangeLog https://secure.php.net/ChangeLog-7.php#7.1.9
Mon Aug 14 14:00:00 2017 pgajdosAATTsuse.com
- added /usr/bin/php7 [bsc#734176]
Mon Aug 7 14:00:00 2017 jweberhoferAATTweberhofer.at
- php7-pear should explicitly require php7-pear-Archive_Tar
otherwise this dependency must be declared in every
php7-pear-
* package explicitly. [bnc#1052389]
Wed Aug 2 14:00:00 2017 ilyaAATTilya.pp.ua
- Updated to 7.1.8: Several bugs have been fixed.
* ChangeLog https://secure.php.net/ChangeLog-7.php#7.1.8
Wed Jul 26 14:00:00 2017 ilyaAATTilya.pp.ua
- Replace %__-type macro indirections.
Fri Jul 21 14:00:00 2017 pgajdosAATTsuse.com
- date extension: regenerate lexers when needed
+ php7-date-regenerate-lexers.patch
Mon Jul 17 14:00:00 2017 pgajdosAATTsuse.com
- dropped mcrypt extension [fate#323673]
Mon Jul 17 14:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.7: This is a security release with several bug
fixes included.
Mon Jul 3 14:00:00 2017 tchvatalAATTsuse.com
- Drop sle11 support as we are not building against it anymore
- Remove php7-BNC-457056.patch that was applied on sle11 only
- Remove dependency on imap-devel, it is not used
- Switch spell from aspell to enchant, dropping pspell subpackage
- Remove unknown switch options from php cli build
- Drop support for berkleydb format, by default there are more
supported solutions built in php
- Use %configure macro in the build phases
Fri Jun 9 14:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.6: Several bugs have been fixed.
Fri May 12 14:00:00 2017 13ilyaAATTgmail.com
- Updated to 7.1.5: Several bugs have been fixed.
* ChangeLog https://secure.php.net/ChangeLog-7.php#7.1.5
Sat Apr 15 14:00:00 2017 13ilyaAATTgmail.com
- Updated to 7.1.4: Several bugs have been fixed.
* ChangeLog https://secure.php.net/ChangeLog-7.php#7.1.4
Fri Mar 17 13:00:00 2017 13ilyaAATTgmail.com
- Updated to 7.1.3: Several bugs have been fixed.
* ChangeLog https://secure.php.net/ChangeLog-7.php#7.1.3
Fri Mar 17 13:00:00 2017 kukukAATTsuse.com
- Don\'t install the init script if we use systemd
Mon Feb 20 13:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.2: Several bugs have been fixed.
- deleted php7-getrandom-test.patch, upstreamed
Tue Feb 14 13:00:00 2017 pgajdosAATTsuse.com
- updated to 7.1.1: This release is the first point release in
the 7.x series. PHP 7.1 comes with numerous improvements and new
features such as
* Nullable types
* Void return type
* Iterable pseudo-type
* Class constant visiblity modifiers
* Square bracket syntax for list() and the ability to specify keys
in list()
* Catching multiple exceptions types
* Many more features and changes…
- migration: http://php.net/manual/en/migration71.php
- php7-systzdata-v13.patch replaced by php7-systzdata-v14.patch
Thu Feb 2 13:00:00 2017 pgajdosAATTsuse.com
- suggest php7-
* instead of php-
* [bsc#1022158c#4]
- do not suggest php-suhosin at all as we do not build it
(not ported to php7 yet)
Tue Jan 24 13:00:00 2017 pgajdosAATTsuse.com
- updated to 7.0.15: Several security bugs were fixed in this
release.
Mon Dec 12 13:00:00 2016 fbuiAATTsuse.com
- Replace pkgconfig(libsystemd-
*) with pkgconfig(libsystemd)
Nowadays pkgconfig(libsystemd) replaces all libsystemd-
* libs, which
are obsolete.
Mon Dec 12 13:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.14: Several security bugs were fixed in this
release.
Fri Nov 11 13:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.13: This is a security release. Several security
bugs were fixed in this release.
Mon Oct 24 14:00:00 2016 pgajdosAATTsuse.com
- adjust firebird dependency
Mon Oct 17 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.12: This is a security release. Several security
bugs were fixed in this release.
Thu Sep 15 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.11: Several security bugs were fixed in this
release.
Wed Aug 31 14:00:00 2016 crrodriguezAATTopensuse.org
- php7-getrandom-test.patch: Fix incorrect test for the getrandom
syscall.
Mon Aug 22 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.10: Several security bugs were fixed in this
release.
Mon Aug 1 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.9: Several security bugs were fixed in this
release, including the HTTP_PROXY issue.
Thu Jun 23 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.8: This is a security release. Several security
bugs were fixed in this release.
- removed: php7-mbstring-missing-return.patch (upstreamed)
Mon Jun 20 14:00:00 2016 pgajdosAATTsuse.com
- systemd unit: remove syslog.target from After [bsc#983938]
Mon May 30 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.7: This is a security release. Several security
bugs were fixed in this release.
Thu Apr 28 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.6: This is a security release. Several security
bugs were fixed in this release.
* removed upstreamed php7-no-reentrant-crypt.patch
Mon Apr 25 14:00:00 2016 schwabAATTlinux-m68k.org
- aarch64-mult.patch: fix asm constraints in aarch64 multiply macro
Thu Apr 7 14:00:00 2016 pgajdosAATTsuse.com
- build for sle12
Wed Apr 6 14:00:00 2016 pgajdosAATTsuse.com
- correct public key
Fri Apr 1 14:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.5
Tue Mar 29 14:00:00 2016 pgajdosAATTsuse.com
- firebird builds now
Thu Mar 3 13:00:00 2016 jimmyAATTboombatower.com
- update to 7.0.4
Wed Feb 10 13:00:00 2016 pgajdosAATTsuse.com
- updated to 7.0.3
Thu Feb 4 13:00:00 2016 pgajdosAATTsuse.com
- require postgresql-devel < 9.4 for sle12 to fix build
Fri Jan 29 13:00:00 2016 pgajdosAATTsuse.com
- more versioned provides
Fri Jan 8 13:00:00 2016 pgajdosAATTsuse.com
- update to 7.0.2: 31 reported bugs has been fixed, including
6 security related issues.
Mon Dec 21 13:00:00 2015 jimmyAATTboombatower.com
- update to 7.0.1
Mon Dec 14 13:00:00 2015 pgajdosAATTsuse.com
- php5-pear-Archive_Tar provides 1.4.0
- install .depdb and .depdblock files along metadata
* php5-depdb-path.patch
- versioned provides in subpackages
Mon Dec 14 13:00:00 2015 jimmyAATTboombatower.com
- Provide obsoletes for sub-packages to improve upgrade process.
Wed Dec 9 13:00:00 2015 jimmyAATTboombatower.com
- Obsolete php5 since php7 conflicts and should replace.
Mon Dec 7 13:00:00 2015 pgajdosAATTsuse.com
- marcello at ceschia.de: fix path php-fpm.conf
Mon Nov 23 13:00:00 2015 pgajdosAATTsuse.com
- set pear\'s metadata dir to %{peardir}
Mon Nov 16 13:00:00 2015 ajAATTajaissle.de
- Spec cleanup
* Split Archive_Tar from -pear sub packge to allow updating this
part via rpm
* Added \"Provides: php-firebird\" to -firebird sub package
* Added \"Provides: mod_php_any\" to server api module packages
- fastcgi and -fpm
Mon Nov 16 13:00:00 2015 pgajdosAATTsuse.com
- test mod_php with %apache_test_module_curl
- restart apache during mod_php upgrade
Tue Sep 8 14:00:00 2015 pgajdosAATTsuse.com
- add php5-fix_net-snmp_disable_MD5.patch [bnc#944302]
Fri Sep 4 14:00:00 2015 pgajdosAATTsuse.com
- fixed segfault in odbc extension when result set is containing
NULL (php bugs #52554, #53007) [bnc#935074] (internal)
+ php7-odbc-cmp-int-cast.patch
Tue Jul 14 14:00:00 2015 pgajdosAATTsuse.com
- updated to 7.0.0
* see NEWS for changes
* see UPGRADING for 5.6.x -> 7.0.x transition
- removed unneded or not upstreamed patches for long time:
* php5-cloexec.patch
* php5-missing-extdeps.patch
* php5-format-string-issues.patch
* php5-per-mod-log.patch
* php5-apache24-updates.patch
* php5-crypto-checks.patch
* php5-systzdata-r12.patch (new: php7-systzdata-v13.patch)
Mon Jul 13 14:00:00 2015 pgajdosAATTsuse.com
- updated to 5.6.11: Five security-related issues in PHP were fixed
in this release, including CVE-2015-3152.
Thu Jun 25 14:00:00 2015 crrodriguezAATTopensuse.org
- php5-systemd-unit.patch: set Killmode=mixed in order
to ensure fpm and children forked by script can terminate
cleanly.
Wed Jun 24 14:00:00 2015 pgajdosAATTsuse.com
- mod_php5.so executable
Thu Jun 18 14:00:00 2015 pgajdosAATTsuse.com
- use apache-rpm-macros
Thu Jun 18 14:00:00 2015 pgajdosAATTsuse.com
- updated to 5.6.10: Several bugs have been fixed as well as several
security issues into some bundled libraries (CVE-2015-3414,
CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326).
Fri Jun 5 14:00:00 2015 mrueckertAATTsuse.de
- enable apparmor support: new BR libapparmor-devel
Mon May 18 14:00:00 2015 pgajdosAATTsuse.com
- update to 5.6.9: Several bugs have been fixed.
- systzdata patch updated to r12
- php5-systzdata-r10.patch
+ php5-systzdata-r12.patch
Fri Apr 24 14:00:00 2015 pgajdosAATTsuse.com
- update to 5.6.8: Several bugs have been fixed some of them beeing
security related, like CVE-2015-1351 and CVE-2015-1352.
- refreshed php5-crypto-checks.patch
Mon Apr 20 14:00:00 2015 pgajdosAATTsuse.com
- configure php-fpm with --localstatedir=/var [bnc#927147]
Wed Apr 8 14:00:00 2015 pgajdosAATTsuse.com
- systzdata patch updated to r10
- php5-systzdata-v7.patch
+ php5-systzdata-r10.patch
Thu Apr 2 14:00:00 2015 pgajdosAATTsuse.com
- build against system gd and libzip only for 13.2 and above
Tue Mar 24 13:00:00 2015 pgajdosAATTsuse.com
- update to 5.6.7: Several bugs have been fixed as well as
CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331.
Tue Mar 24 13:00:00 2015 pgajdosAATTsuse.com
- build against system gd [bnc#923946]
Fri Mar 20 13:00:00 2015 pgajdosAATTsuse.com
- build against system libzip [bnc#922894]
Mon Feb 23 13:00:00 2015 pgajdosAATTsuse.com
- update to 5.6.6: fixes several bugs and addresses CVE-2015-0235
and CVE-2015-0273.
Mon Feb 9 13:00:00 2015 pgajdosAATTsuse.com
- added README.default_socket_timeout [bnc#907519]
Tue Feb 3 13:00:00 2015 pgajdosAATTsuse.com
- fix sle_11_sp3 build
Mon Jan 26 13:00:00 2015 pgajdosAATTsuse.com
- update to 5.6.5: This release fixes several bugs as well as
CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232.
- removed patches:
* php-CVE-2014-9426.patch
* php-CVE-2014-9427.patch
* php-CVE-2015-0231.patch
Wed Jan 21 13:00:00 2015 pgajdosAATTsuse.com
- added php-CVE-2015-0231.patch [bnc#910659]
Mon Jan 5 13:00:00 2015 pgajdosAATTsuse.com
- added php-CVE-2014-9426.patch [bnc#911663]
- added php-CVE-2014-9427.patch [bnc#911664]
Fri Dec 19 13:00:00 2014 pgajdosAATTsuse.com
- update to 5.6.4: This release fixes several bugs and one CVE
related to unserialization.
Tue Nov 18 13:00:00 2014 pgajdosAATTsuse.com
- update to 5.6.3: This release fixes several bugs and one CVE
in the fileinfo extension.
Mon Oct 27 13:00:00 2014 pgajdosAATTsuse.com
- update to 5.6.2: Four security-related bugs were fixed in this
release, including fixes for CVE-2014-3668, CVE-2014-3669 and
CVE-2014-3670.
Tue Oct 14 14:00:00 2014 pgajdosAATTsuse.com
- upgraded to 5.6.1:
* Several bugs were fixed in this release (including CVE-2014-3622).
Thu Oct 2 14:00:00 2014 crrodriguezAATTopensuse.org
- php5-crypto-checks.patch: Fix broken libcrypto checks
DSA_get_default_method is in -lcrypto not -lssl
- DO not use xorg-x11-devel, just pkgconfig(xpm) and xft
- Support WEBP in the gd extension by buildrequiring libvpx-devel
Fri Aug 29 14:00:00 2014 pgajdosAATTsuse.com
- fix CVE-2014-5459 [bnc#893849]
Fri Aug 29 14:00:00 2014 pgajdosAATTsuse.com
- actually, there\'s no point to install pear from other source
than from php tarball
* remove source install-pear-nozlib.phar
Thu Aug 28 14:00:00 2014 pgajdosAATTsuse.com
- updated PEAR to 1.9.5, bugfix release
see http://pear.php.net/package/PEAR/download
for details
Thu Aug 28 14:00:00 2014 pgajdosAATTsuse.com
- updated to 5.6.0:
* Most improvements in PHP 5.6.x have no impact on existing code.
There are a few incompatibilities and new features that should
be considered:
http://php.net/manual/en/migration56.php
- removed patches:
* php5-big-file-upload.patch (upstreamed)
* php5-suhosin-php55.patch (upstreamed)
- modified patches:
* php5-openssl.patch (refreshed)
Tue Aug 26 14:00:00 2014 pgajdosAATTsuse.com
- This release fixes several bugs against PHP 5.5.15 and resolves
CVE-2014-3538, CVE-2014-3587, CVE-2014-2497, CVE-2014-5120 and
CVE-2014-3597.
- removed patches:
* php-CVE-2014-2497.patch
Tue Jul 29 14:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.15:
This release fixes several bugs against PHP 5.5.14.
The list of changes is recorded in the ChangeLog or
http://php.net/ChangeLog-5.php#5.5.15.
- removed patches:
* php-CVE-2014-4670.patch (upstreamed)
* php-CVE-2014-4698.patch (upstreamed)
Thu Jul 17 14:00:00 2014 pgajdosAATTsuse.com
- security update:
* php-CVE-2014-4670.patch [bnc#886059]
* php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
Tue Jul 1 14:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.14: This release fixes several bugs against
PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
half of them concerning the FileInfo extension.
- removed php-5.5.13-CVE-2014-4049.patch (upstreamed)
Tue Jun 17 14:00:00 2014 pgajdosAATTsuse.com
- security update
* php-5.5.13-CVE-2014-4049.patch [bnc#882992]
Tue Jun 17 14:00:00 2014 pgajdosAATTsuse.com
- php5-5.5.10-CVE-2014-2497.patch renamed to
php-5.5.10-CVE-2014-2497.patch to be consistent with other
product php patches names
Tue Jun 3 14:00:00 2014 pgajdosAATTsuse.com
- do not package latest_test_results.txt; instead, run build-test.sh
twice: before and after source changes
Mon Jun 2 14:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.13: This release fixes several bugs in PHP 5.5.12,
and addresses two CVEs in Fileinfo (CVE-2014-0238 and CVE-2014-0237).
Wed May 7 14:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.12: Fixed several bugs against PHP 5.5.11,
as well as CVE-2014-0185 regarding PHP-FPM.
- improved build-test.sh
Wed Apr 30 14:00:00 2014 pgajdosAATTsuse.com
- build-test.sh: use relevant api for build; propagate build
parameters to osc
Wed Apr 30 14:00:00 2014 schwabAATTlinux-m68k.org
- php5-gcc_builtins.patch: remove unused patch
Tue Apr 29 14:00:00 2014 pgajdosAATTsuse.com
- add build-test.sh and latest_test_results.txt for testing
regressions in tests before and after update. Run
sh build-test.sh
after changes. php will get built and test results will be
compared with latest_test_results.txt and differences reported.
mv latest_test_results.txt.new latest_test_results.txt
if differences are acceptable.
Wed Apr 9 14:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.11:
* Several bugs were fixed in this release, some bundled libraries
updated and a security issue has been fixed : CVE-2013-7345.
Fri Apr 4 14:00:00 2014 pgajdosAATTsuse.com
- fixed CVE-2014-2497 [bnc#868624]
Mon Mar 17 13:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.10:
* Several bugs were fixed in this release, including security
issues related to CVEs. CVE-2014-1943, CVE-2014-2270 and
CVE-2013-7327 have been addressed in this release.
Tue Feb 11 13:00:00 2014 adaugherityAATTtamu.edu
- Fix build on non-systemd distros (esp. SLES 11)
Fri Feb 7 13:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.9:
* This release fixes several bugs against PHP 5.5.8.
* see NEWS or http://www.php.net/ChangeLog-5.php#5.5.9 for
details
- modified patches:
* php5-no-build-date.patch (refreshed using quilt)
Mon Jan 13 13:00:00 2014 pgajdosAATTsuse.com
- updated to 5.5.8:
* fixes CVE-2013-6712 and build against freetype2
* see http://www.php.net/ChangeLog-5.php#5.5.8
for more
* removed CVE-2013-6712.patch
* removed freetype2_include_dir.patch
Fri Dec 20 13:00:00 2013 hrvoje.senjanAATTgmail.com
- Added php5-freetype2_include_dir.patch: Fixes check of freetype2
headers, as freetype2 2.5.1 changed the header location
Wed Dec 18 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.7:
* fixes some bugs against PHP 5.5.6 and it also includes a fix
for CVE-2013-6420 in OpenSSL extension
- > removed CVE-2013-6420.patch
Wed Dec 11 13:00:00 2013 pgajdosAATTsuse.com
- security update [bnc#854880]
* added CVE-2013-6420.patch
Tue Dec 3 13:00:00 2013 pgajdosAATTsuse.com
- security update [bnc#853045]
* added CVE-2013-6712.patch
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.6:
* fixes some bugs against PHP 5.5.5, and adds some performance
improvements.
* see http://www.php.net/ChangeLog-5.php#5.5.6 for details
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.5:
* This release fixes about twenty bugs against PHP 5.5.4, some
of them regarding the build system.
* added sys_temp_dir ini directive
- removed custom-tmp-dir.patch (upstreamed)
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.4:
* This release fixes several bugs against PHP 5.5.3.
- crypt-tests.patch partially upstreamed
- use zend_extension instead of extension directive in opcache.ini
[bnc#840350]
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.3: These release fix a bug in the patch for
CVE-2013-4248 in OpenSSL module and compile failure with ZTS enabled
in PHP 5.4.
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.2:
* About 20 bugs were fixed, including security issue in OpenSSL
module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.1
* bugfixes incl. security fix in the XML parser
Fri Nov 22 13:00:00 2013 Ralf Lang
- replace php5-64-bit-post-large-files.patch with php5-big-file-upload.patch
patch that uses def_t instead of signed long as suggested by upstream
Fri Nov 22 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.5.0:
* Added generators and coroutines.
* Added the finally keyword.
* Added a simplified password hashing API.
* Added support for constant array/string dereferencing.
* Added scalar class name resolution via ::class.
* Added support for using empty() on the result of function
calls and other expressions.
* Added support for non-scalar Iterator keys in foreach.
* Added support for list() constructs in foreach statements.
* Added the Zend OPcache extension for opcode caching.
* A lot more improvements and fixes.
* PHP logo GUIDs have been removed.
* Case insensitivity is no longer locale specific. All case
insensitive matching for function, class and constant names
is now performed in a locale independent manner according to
ASCII rules.
- buildrequire cyrus-sasl-devel explicitely
- suhosin-php54.patch renamed to suhosin-php55.patch
Mon Nov 18 13:00:00 2013 pgajdosAATTsuse.com
- update to 5.4.22:
* About 10 bugs were fixed.
* see http://www.php.net/ChangeLog-5.php#5.4.22 for details
Wed Oct 30 13:00:00 2013 pgajdosAATTsuse.com
- updatedto 5.4.21:
* About 10 bugs were fixed.
* added custom-tmp-dir.patch by Per Jessen
Sun Oct 13 14:00:00 2013 crrodriguezAATTopensuse.org
- build with --with-fpm-systemd and install systemd unit
- php5-systemd-unit.patch: tweak systemd unit for openSUSE requirements
- php5-openssl.patch: only openSSL_config() is really needed.
- Recommended for 13.1 and Factory
Wed Sep 25 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.20:
* About 30 bugs were fixed.
Thu Sep 5 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.19:
* These releases fix a bug in the patch for CVE-2013-4248 in
OpenSSL module and compile failure with ZTS enabled in PHP 5.4.
Tue Aug 20 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.18:
* About 30 bugs were fixed, including security issues CVE-2013-4113
and CVE-2013-4248.
Thu Aug 1 14:00:00 2013 crrodriguezAATTopensuse.org
- php5-per-mod-log.patch: It turns out that requesting per-module
logging support in 2.4 will not do a thing if the expansion
of APLOG_USE_MODULE is not visible to all files of the module
so place it in the header instead.
Wed Jul 31 14:00:00 2013 crrodriguezAATTopensuse.org
- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
to determine when the module has to be loaded.
I made this patches at least a year ago, but for some reason
they went out of my radar and were not applied to upstream
Will be submitted again soon.
Mon Jul 15 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.17:
Core:
Fixed bug #64988 (Class loading order affects E_STRICT warning).
Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
Fixed bug #64960 (Segfault in gc_zval_possible_root).
Fixed bug #64936 (doc comments picked up from previous scanner run).
Fixed bug #64934 (Apache2 TS crash with get_browser()).
Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
discarding whitespace).
DateTime:
Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
FPM:
Fixed bug #64915 (error_log ignored when daemonize=0).
Implemented FR #64764 (add support for FPM init.d script).
PDO:
Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
PDO to the same db server).
PDO_DBlib:
Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
Fixed bug #64338 (pdo_dblib can\'t connect to Azure SQL).
Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
executed statement crashes).
PDO_firebird:
Fixed bug #64037 (Firebird return wrong value for numeric field).
Fixed bug #62024 (Cannot insert second row with null using
parametrized query).
PDO_mysql:
Fixed bug #48724 (getColumnMeta() doesn\'t return native_type for BIT,
TINYINT and YEAR).
PDO_pgsql:
Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
pgsql:
Fixed bug #64609 (pg_convert enum type support).
Readline:
Implement FR #55694 (Expose additional readline variable to prevent
default filename completion).
SPL:
Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
on 64-bits systems).
Tue Jun 18 14:00:00 2013 jengelhAATTinai.de
- Explicitly specify cyrus-sasl build dependency
Thu Jun 13 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.16
- Core:
. Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
CVE 2013-2110). (Stas)
. Fixed bug #64853 (Use of no longer available ini directives causes crash on
TS build). (Anatol)
. Fixed bug #64729 (compilation failure on x32). (Gustavo)
. Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
. Fixed bug #64660 (Segfault on memory exhaustion within function definition).
(Stas, reported by Juha Kylmänen)
- Calendar:
. Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
. Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
. Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
. Fixed some possible memory or resource leaks and possible null dereference
detected by code coverity scan. (Remi)
. Log a warning when a syscall fails. (Remi)
. Add --with-fpm-systemd option to report health to systemd, and
systemd_interval option to configure this. The service can now use
Type=notify in the systemd unit file. (Remi)
- MySQLi
. Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
pointer has closed). (Laruence)
- Phar
. Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
with non std tmp dir). (Pierre)
- SNMP:
. Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
(Boris Lytochkin)
. Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
. Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
on Windows x64). (Anatol)
- Zend Engine:
. Fixed bug #64821 (Custom Exceptions crash when internal properties
overridden). (Anatol)
Fri May 10 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.15:
Core:
Fixed bug #64578 (debug_backtrace in set_error_handler
corrupts zend heap: segfault).
Fixed bug #64458 (dns_get_record result with string of
length -1).
Fixed bug #64433 (follow_location parameter of context
is ignored for most response codes).
Fixed bug #47675 (fd leak on Solaris).
Fixed bug #64577 (fd leak on Solaris).
Fileinfo:
Upgraded libmagic to 5.14.
Streams:
Fixed Windows x64 version of stream_socket_pair() and
improved error handling.
Zip:
Fixed bug #64342 (ZipArchive::addFile() has to check
for file existence).
Fri Apr 26 14:00:00 2013 adaugherityAATTtamu.edu
- Conflict with php53 packages so zypper doesn\'t suggest installing a
mix of php53-
* (from SLES 11) and php5-
* (these 5.4 packages).
Fri Apr 26 14:00:00 2013 adaugherityAATTtamu.edu
- Fix build on SLES 11 (no firebird) and openSUSE <= 12.1 (no separate
libfbclient2-devel pkg).
Mon Apr 22 14:00:00 2013 pgajdosAATTsuse.com
- use current install-pear-nozlib.phar from
http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
see explanation in the spec
Wed Apr 17 14:00:00 2013 slavb18AATTgmail.com
- add php5-firebird providing php5-interbase and php5-pdo_firebird
Mon Apr 15 14:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.14:
Core:
Fixed bug #64529 (Ran out of opcode space).
Fixed bug #64515 (Memoryleak when using the same variablename
two times in function declaration).
Fixed bug #64432 (more empty delimiter warning in strX methods).
Fixed bug #64417 (ArrayAccess::&offsetGet() in a trait causes
fatal error).
Fixed bug #64370 (microtime(true) less than $_SERVER[\'REQUEST_TIME_FLOAT\']).
Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
or 5.4.11).
Fixed bug #63976 (Parent class incorrectly using child constant
in class property).
Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
handle exceptions properly).
Fixed bug #62343 (Show class_alias In get_declared_classes()).
PCRE:
Merged PCRE 8.32.
SNMP:
Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
Zip:
Fixed bug #64452 (Zip crash intermittently). (Anatol)
Mon Apr 15 14:00:00 2013 pgajdosAATTsuse.com
- libc-client.so needs -lssl
Fri Apr 5 14:00:00 2013 pgajdosAATTsuse.com
- fixed \'http limits uploads to 2GB\' [bnc#812800], see
https://bugs.php.net/bug.php?id=44522
* 64bit-post-large-files.patch
Thu Mar 21 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.13:
Core:
Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
Implemented FR #64175 (Added HTTP codes as of RFC 6585).
Fixed bug #64142 (dval to lval different behavior on ppc64).
Fixed bug #64070 (Inheritance with Traits failed with error).
CLI server:
Fixed bug #64128 (buit-in web server is broken on ppc64).
Mbstring:
mb_split() can now handle empty matches like preg_split() does.
OpenSSL:
Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
PDO_mysql:
Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
Phar:
Fixed timestamp update on Phar contents modification.
SOAP
Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
SPL:
Fixed bug #64264 (SPLFixedArray toArray problem).
Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
SNMP:
Fixed bug #64124 (IPv6 malformed).
Thu Mar 21 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.4.12:
* dropped sqlite.so (no longer shipped with 5.4)
* dropped t1lib support
* dropped %{suse_version} 10.x support
* see /usr/share/doc/packages/php5/UPGRADING or
http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/UPGRADING
for details
* source changes:
D php-5.2.9-BNC-457056.patch -- renamed to php5-BNC-457056.patch
D php-5.3.0-bnc513080.patch -- there\'s no relevant code in exif.c
D php-5.3.1-systzdata-v7.patch -- renamed to php5-systzdata-v7.patch
D php-5.3.2-aconf26x.patch -- dropped, it is not needed yet
D php-5.3.2-ini.patch -- renamed to php5-ini.patch
D php-5.3.2-no-build-date.patch -- renamed to php5-no-build-date.patch
D php-5.3.22.tar.bz2 -- old tarball
D php-5.3.4-format-string-issues.patch -- renamed to php5-format-string-issues.patch
D php-5.3.4-pts.patch -- renamed to php5-pts.patch
D php-5.3.6-gcc_builtins.patch -- renamed to php5-gcc_builtins.patch
D php-5.3.6-ini-date.timezone.patch -- part of php5-ini.patch
D php-5.3.8-CVE-2011-4153.patch -- fixed in 5.4 branch
D php-5.3.8-crypt-tests.patch -- renamed to php5-crypt-tests.patch
D php-5.3.8-no-reentrant-crypt.patch -- renamed to php5-no-reentrant-crypt.patch
A php-5.4.13.tar.bz2 -- new version tarball
D php-cloexec.patch -- renamed to php5-cloexec.patch
M php-suse-addons.tar.bz2 -- content of tar balls are actualy equal
A php5-BNC-457056.patch -- renamed from php-5.2.9-BNC-457056.patch, not rebased
A php5-cloexec.patch -- renamed from php-cloexec.patch, rebased
A php5-sytzdata-v7.patch -- renamed from sytzdata-v7.pach, not rebased
A php-format-string-issues.patch -- renamed from php5-5.3.4-format-string-issues.patch, not rebased
A php5-crypt-tests.patch -- renamed from php-5.3.8-crypt-tests.patch, not rebased
A php5-gcc_builtins.patch -- renamed from php-5.3.6-gcc_builtins.patch, not rebased
A php5-ini.patch -- renamed from php-5.3.2-ini.patch, rebased
A php5-mbstring-missing-return.patch -- new patch, missing return
M php5-missing-extdeps.patch -- rebased
A php5-no-build-date.patch -- renamed from php-5.3.2-no-build-date.patch, rebased
A php5-no-reentrant-crypt.patch -- renamed from php-5.3.8-no-reentrant-crypt.patch, not rebased
M php5-openssl.patch -- rebased
M php5-phpize.patch -- rebased
A php5-pts.patch -- renamed from php-5.3.4-pts.patch, not rebased
A php5-suhosin-php54.patch -- patch on top of suhosin-0.9.33.tgz to work with php 5.4
M php5.changes -- this change log
M php5.spec -- new version, etc
D suhosin-patch-5.3.3-0.9.10.patch.gz -- dropped, seems not be used for some time
Mon Feb 25 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.3.22:
. Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes)
. Fixed bug #63899 (Use after scope error in zend_compile). (Laruence)
. Fixed bug #63943 (Bad warning text from strpos() on empty needle).
(Laruence)
. Fixed bug #55397 (comparsion of incomplete DateTime causes SIGSEGV).
(Laruence, Derick)
. Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)
. Added check that soap.wsdl_cache_dir conforms to open_basedir
(CVE-2013-1635). (Dmitry)
. Disabled external entities loading (CVE-2013-1643). (Dmitry)
. Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended). (Nikita Popov)
Thu Feb 7 13:00:00 2013 pgajdosAATTsuse.com
- updated to 5.3.21:
* Fixed bug #63762 (Sigsegv when Exception::$trace is changed by user).
* Fixed bug (segfault due to libcurl connection caching).
* Fixed bug #63795 (CURL >= 7.28.0 no longer support value 1 for CURLOPT_SSL_VERIFYHOST).
etc. see NEWS for details
Thu Oct 18 14:00:00 2012 pgajdosAATTsuse.com
- fix CVE-2011-4153 CVE-2011-4153 [bnc#741859]
Tue Oct 16 14:00:00 2012 cooloAATTsuse.com
- add explicit buildrequire on libbz2-devel
(having to patch old .changes file to avoid \"double entry\")
Thu Oct 11 14:00:00 2012 pgajdosAATTsuse.com
- updated to 5.3.17:
* Fixed bug (segfault while build with zts and GOTO vm-kind)
* Fixed bug #62844 (parse_url() does not recognize //
* etc. see NEWS for details
Mon Aug 27 14:00:00 2012 pgajdosAATTsuse.com
- use FilesMatch with \'SetHandler\' rather than \'AddHandler\'
[bnc#775852]
Mon Aug 27 14:00:00 2012 pgajdosAATTsuse.com
- updated to 5.3.16:
* fixes over 20 bugs, see NEWS for more details
Wed Jul 25 14:00:00 2012 pgajdosAATTsuse.com
- updated to 5.3.15:
* fixes over 30 bugs and includes a fix for a security related
overflow issue in the stream implementation (CVE-2012-2688)
[bnc#772582] and open_basedir bypass, CVE-2012-3365 [bnc#772580]
Mon Jun 18 14:00:00 2012 pgajdosAATTsuse.com
- updated to 5.3.14:
* bug-fix release, see NEWS for details
Fri May 25 14:00:00 2012 pgajdosAATTsuse.com
- updated to 5.3.13: various security fixes,
CVE-2012-1823, CVE-2012-2311, CVE-2012-2335, CVE-2012-2336
* removed php-5.3.10-pcre_fullinfo.patch
* refreshed php-5.3.2-aconf26x.patch
Thu Mar 8 13:00:00 2012 cooloAATTsuse.com
- fix license to spdx.org format
Tue Feb 28 13:00:00 2012 pgajdosAATTsuse.com
- fixed build with new pcre (php bug 60986)
Sat Feb 4 13:00:00 2012 crrodriguezAATTopensuse.org
- Build with -fpie
Thu Feb 2 13:00:00 2012 crrodriguezAATTopensuse.org
- PHP 5.3.10, fixes CVE-2012-0830.
Sat Jan 28 13:00:00 2012 crrodriguezAATTopensuse.org
- remove unapplied patches
Wed Jan 18 13:00:00 2012 pgajdosAATTsuse.com
- buildrequire libjpeg-devel
Tue Jan 17 13:00:00 2012 pgajdosAATTsuse.com
- remove apache module conflict with apache2-worker [bnc#728671]
- amended README.SUSE instead
Wed Jan 11 13:00:00 2012 crrodriguezAATTopensuse.org
- Update to version 5.3.9
* Drop already applied patches
* This update only contain minor bug fixes, it is a stop over
php 5.4.0 that should be out very soon.
Mon Jan 2 13:00:00 2012 pgajdosAATTsuse.com
- security update:
* CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
to prevent attacks based on hash collisions
Wed Dec 21 13:00:00 2011 cooloAATTsuse.com
- add autoconf as buildrequire to avoid implicit dependency
Tue Dec 20 13:00:00 2011 pgajdosAATTsuse.com
- apache module conflicts with apache2-worker [bnc#728671]
Fri Dec 16 13:00:00 2011 pgajdosAATTsuse.com
- security update:
* CVE-2011-4566 [bnc#733590]
* CVE-2011-1466 [bnc#736169]
Tue Dec 6 13:00:00 2011 cooloAATTsuse.com
- fix license - there is no 3.1 version of php license
Tue Nov 29 13:00:00 2011 pgajdosAATTsuse.com
- build php against system\'s libcrypt, which drops
extended DES support
* crypt-tests.patch
* no-reentrant-crypt.patch
Mon Nov 7 13:00:00 2011 pgajdosAATTsuse.com
- security update:
CVE-2011-3379 [bnc#728350]
Sun Sep 18 14:00:00 2011 crrodriguezAATTopensuse.org
- Fix wrong PAGE_SIZE assumption, must use sysconf() instead
- Fix integer overflow when attempting to use more than 2 Gb
of memory.
Mon Sep 5 14:00:00 2011 crrodriguezAATTopensuse.org
- call openssl_config too in order to load user-provided
engine configuration.
Sat Sep 3 14:00:00 2011 crrodriguezAATTopensuse.org
- Cleanup patches for upcoming release.
Sun Aug 28 14:00:00 2011 andrea.turriniAATTgmail.com
- Fixed typos in php5.spec
Tue Aug 23 14:00:00 2011 crrodriguezAATTopensuse.org
- Fix very publicized critical bug in crypt() implementation
Fri Aug 12 14:00:00 2011 crrodriguezAATTopensuse.org
- Add mssql support with freetds
- Update PHP snapshot.
Tue Aug 9 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snapshot, more static analyzer fixes.
Sun Aug 7 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snapshot, fix converity warnings
Fri Aug 5 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snapshot, several check if malloc() succeeded.
Wed Aug 3 14:00:00 2011 crrodriguezAATTopensuse.org
- Fix build in Factory
- Fix Segfault with allow_call_time_pass_reference = Off
- Using class constants in array definition fails
Mon Aug 1 14:00:00 2011 crrodriguezAATTopensuse.org
- Add sqlite3 session storage, this is no more than
a forward port of already existent sqlite2 backend
Sun Jul 31 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snap, PHP 5.3.7-RC4
Wed Jul 27 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snapshot again.
Sat Jul 23 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snapshot.
Thu Jul 14 14:00:00 2011 crrodriguezAATTopensuse.org
- is_a() function is throwing an annoying warning
\"Unknown class passed as parameter\" which is noticeable when
you use PEAR, fix it, if your code uses it you should be
using the instanceof operator anyway.
- Update bundled pear.
Mon Jul 11 14:00:00 2011 crrodriguezAATTopensuse.org
- Crash in gc_remove_zval_from_buffer CVE-NO-NAME
- Crash in zend_mm_check_ptr // Heap corruption
Wed Jul 6 14:00:00 2011 crrodriguezAATTopensuse.org
- Fixed missing Expires and Cache-Control headers for ping and status pages
- fix crypt() issue with overlong salt
- Fixed bug #52935 (call exit in user_error_handler cause stream relate core).
Mon Jun 27 14:00:00 2011 crrodriguezAATTopensuse.org
- Fix crash in error_log (strlen with NULL)
- Fixed exit at FPM startup on fpm_resources_prepare
- Added master rlimit_files and rlimit_core
- Removed pid in debug logs written by chrildren processes
- Replaced shm_slots with a real scoreboard
Wed Jun 22 14:00:00 2011 crrodriguezAATTopensuse.org
- Enable mysqlnd compression protocol.
Thu Jun 16 14:00:00 2011 crrodriguezAATTopensuse.org
- Update snapshot to 5.3.7 RC1
Tue Jun 14 14:00:00 2011 crrodriguezAATTopensuse.org
- Allow bison 2.5
-File path injection vulnerability in RFC1867 File upload CVE-2011-2202.
Fri Jun 10 14:00:00 2011 crrodriguezAATTopensuse.org
- Update 5.3 snap
- Fix compiler failure that happended after compile error.
- Stream not closed and error not returned when SSL CN_match fails.
Mon Jun 6 14:00:00 2011 crrodriguezAATTopensuse.org
- Update 5.3 snap
- Update bundled PEAR
- Case discrepancy in timezone names cause Uncaught exception and fatal error.
- SEEK_CUR with 0 value, returns a warning
- Restore fix: do not accept paths with NULL in them
Fri Jun 3 14:00:00 2011 crrodriguezAATTopensuse.org
- Update to version 5.3.6.201106031621
- Crash when calling call_user_func with unknown function name
- Fixed double registering of browscap ini directive
Sun May 29 14:00:00 2011 crrodriguezAATTopensuse.org
- Drop Update alternatives usage, there are no alternatives
PHP4 is gone and PHP6 is not coming at any time soon.
- Remove \"mm\" support from session module, virtually nothing
uses it and it doesnt support proper locking, mount
/var/lib/php5 in tmpfs instead.
Sun May 29 14:00:00 2011 crrodriguezAATTopensuse.org
- Update to 5.3.6.201105291701
* Fixes random crash with apache2 SAPI and php_admin_value
in virtualhost configuration.
Fri May 20 14:00:00 2011 crrodriguezAATTopensuse.org
- Update 5.3 branch
- Fix a few memory leaks
- Check if tempfile can be created in phar extension
- Fix problems with __halt_compiler and imported namespaces
- Properly handle out of memory conditions in mysqlnd
Sat May 14 14:00:00 2011 crrodriguezAATTopensuse.org
- Update 5.3 branch.
- Fix user after free in xmlreader extension.
Mon May 9 14:00:00 2011 crrodriguezAATTopensuse.org
- Update to current 5.3 svn version.
- For practical reasons now the hash extension is built-in,hence
deprecates package php5-hash, it is nowdays required by the session
and phar extensions but must be statically built to work.
- Drop php5-session patch, needed only to workaround compile
failure when hash extension is built as loadable extension.
- php.ini now clearly says that by \"3\" in session.hash_function
we mean SHA256.
Fri Apr 29 14:00:00 2011 crrodriguezAATTopensuse.org
- Update to a recent 5.3.x SVN version, mostly bug fixes
* track_errors causes segfault
* classes from dl()\'ed extensions are not destroyed
* Crash when assigning value to a dimension in a non-array
* use-after-free in substr_replace()
Wed Apr 13 14:00:00 2011 crrodriguezAATTopensuse.org
- fix crash on destruction.
- allow openssl extension to be built w/o SSLv2
Tue Apr 5 14:00:00 2011 langAATTb1-systems.de
- Add a default to date.timezone because php5 warns that this is a required setting and clutters up the output in zypper installations of pear packages and other places
- Versions after 5.3.6 may make this fatal
Sat Apr 2 14:00:00 2011 crrodriguezAATTopensuse.org
- Intl extension failed to load [bnc#659868]
- Fix update-alternatives usage,will be dropped in the future.
Mon Mar 28 14:00:00 2011 sbutler1AATTillinois.edu
- Add tcpd-devel for building the SNMP extension on SLE_10 and apache_server_SLE_10.
Thu Mar 17 13:00:00 2011 crrodriguezAATTopensuse.org
- Update to php 5.3.6 final
* Enforce security in the fastcgi protocol parsing with fpm SAPI.
* Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153)
* Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092)
* Fixed bug #54055 (buffer overrun with high values for precision ini setting).
* Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708)
* Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421)
Wed Mar 16 13:00:00 2011 crrodriguezAATTopensuse.org
- Upgrade to PHP 5.3.6.RC3
* Drop obsoleted patches
* fix some rpmlint warnings
* Hundreds of changes, see NEWS for details
Wed Mar 9 13:00:00 2011 crrodriguezAATTopensuse.org
- Fix more date in binaries causing pointless republish of pkgs.
Fri Feb 25 13:00:00 2011 chrisAATTcomputersalat.de
- fix for macros.php
o devel pkg must have Obsoletes/Provides: php-macros
Tue Feb 22 13:00:00 2011 pgajdosAATTsuse.cz
- security fixes
* CVE-2011-0420 [bnc#672933]
* CVE-2011-0708 [bnc#671710]
Thu Feb 10 13:00:00 2011 chrisAATTcomputersalat.de
- extend macros.php
o __php, __phpize, __php_config, php_version
o __pear, php_peardir, php_pearxmldir
o php_pear_gen_filelist
- add README.macros
Thu Jan 13 13:00:00 2011 pgajdosAATTsuse.cz
- security fix:
* fopen_https_proxy_auth_fix.patch [bnc#656523]
Mon Jan 10 13:00:00 2011 cristian.rodriguezAATTopensuse.org
- export PHP_MYSQLND_ENABLED=yes to solve the mysqlnd problem
when extensions are built shared. [bnc#661464]
Mon Jan 10 13:00:00 2011 cristian.rodriguezAATTopensuse.org
- Go back to libmysql as there is currently no way
to build shared mysql extensions with mysqlnd. [bnc#661464]
Sun Jan 9 13:00:00 2011 cristian.rodriguezAATTopensuse.org
- Use mysqlnd driver, this is a newer PHP-native mysql
extension, that does not require external libraries.
Now you can use mysql, mariadb or drizzle without extra libs.
fixes bnc #661464 and other old feature requests.
Thu Jan 6 13:00:00 2011 cristian.rodriguezAATTopensuse.org
- Update to version 5.3.5, Critical Update
* Fixed bug #53632 (PHP hangs on numeric value 2.2250738585072011e-308). (CVE-2010-4645)
Only 32 bit binaries affected, confirmed in factory i586.
Fri Dec 17 13:00:00 2010 cristian.rodriguezAATTopensuse.org
- revert unsuitable patch php-5.3.4-dlopen.patch
Tue Dec 14 13:00:00 2010 cristian.rodriguezAATTopensuse.org
- Add php-5.3.4-dlopen.patch from fedora,makes dlopen to use
bind_now instead of lazy.
- Compiler is now in C99 mode for both core and extensions.
Tue Dec 14 13:00:00 2010 cristian.rodriguezAATTopensuse.org
- fix format string bug in Phar extension I just found
http://bugs.php.net/bug.php?id=53541 and the underlying
issue, which is the lack of format attributes in several
core prototypes.
Mon Dec 13 13:00:00 2010 cristian.rodriguezAATTopensuse.org
- Update to PHP 5.3.4 final
* Fixed crash in zip extract method (possible CWE-170).
* Paths with NULL in them (foo\\0bar.txt) are now considered as invalid (CVE-2006-7243).
* Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
* Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
* Fixed possible flaw in open_basedir (CVE-2010-3436).
* Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
* Fixed symbolic resolution support when the target is a DFS share.
* Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
* Key Bug Fixes in PHP 5.3.4 include:
* Added stat support for zip stream.
* Added follow_location (enabled by default) option for the http stream support.
* Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
* Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
* Multiple improvements to the FPM SAPI.
* Over 100 other bug fixes.
- SUSE specific;
* enable PTY support in proc_open (temporary)
Wed Nov 24 13:00:00 2010 roAATTsuse.de
- xft-config is gone
Tue Nov 2 13:00:00 2010 cristian.rodriguezAATTopensuse.org
- Update to 5.3.3_svn201011020214
* Fix Performance issue, array_diff may take hours instead
of seconds in some scenarios,regression appeared in version
5.2.5
Wed Oct 27 14:00:00 2010 cristian.rodriguezAATTopensuse.org
- Update to 5.3.3_svn20101027xx
- Fix init script again.
Thu Oct 14 14:00:00 2010 crrodriguezAATTopensuse.org
- update to 5.3.3_svn201010140300
- Fix php-fpm init script.
Sat Oct 9 14:00:00 2010 cristian.rodriguezAATTopensuse.org
- Update to an slightly newer PHP 5.3.3.x snap, fixes
around 100 bugs including open_basedir problems.
- add the fpm sapi to the package.
Tue Aug 3 14:00:00 2010 cristian.rodriguezAATTopensuse.org
- Clarify changelog this update fixed:
* VUL-0: php5 new unserialize() flaw CVE-2010-2225 [bnc#616232]
* VUL-0: php5: MOPS-2010-021: fnmatch() Stack Exhaustion Vulnerability [bnc#605097]
* VUL-0: php5: MOPS-2010-017: preg_quote() Interruption Information Leak [bnc#605100]
* VUL-0: php5: MOPS-2010-022 use after free [bnc#609763]
* VUL-0: php5-phar: MOPS-2010-0{24,25,26,27,28} format string bugs [bnc#609766]
* VUL-0: php5: MOPS-2010-0{32,33,34} use space interruption in iconv functions [bnc#609768]
* VUL-0: php5: MOPS-2010-0{36,37,38,39,40} userspace interruptions [bnc#609769]
* VUL-0: php5: MOPS-2010-0{36..46} userspace interruptions [bnc#609769]
* VUL-0: php5: MOPS-2010-047/048 information leak [bnc#612555]
* VUL-0: php5: MOPS-2010-049/50/51/52/53/54/55 memory corruption and/or info leak [bnc#612556]
* VUL-0: PHP5: Session Data Injection Vulnerability [bnc#619483]
* VUL-0: PHP5: multiple heap based buffer overflows [bnc#619486]
* bugzilla numbers 619487,619489,619469,609766..
Tue Jul 20 14:00:00 2010 cristian.rodriguezAATTopensuse.org
- Update to PHP 5.3.3 RC3
- Massive lot of security fixes see list
here http://www.php-security.org/category/vulnerabilities/index.html
Tue Jun 1 14:00:00 2010 cristian.rodriguezAATTopensuse.org
- possible fix for [bnc#610633]
Fri Apr 16 14:00:00 2010 crrodriguezAATTopensuse.org
- use FD_CLOEXEC flag to avoid annoying races.
Sun Apr 4 14:00:00 2010 crrodriguezAATTopensuse.org
- remove obsolete buildRequires
Fri Apr 2 14:00:00 2010 crrodriguezAATTopensuse.org
- remove build date from binaries so they dont get
republished every time
- fix invalid path
Thu Apr 1 14:00:00 2010 crrodriguezAATTopensuse.org
- add missing patch, refresh patches with -p0
Thu Apr 1 14:00:00 2010 crrodriguezAATTopensuse.org
- Update to PHP 5.3.2, see NEWS for details
Fri Mar 5 13:00:00 2010 dimstarAATTopensuse.org
- Add php5-autoconf-2.65.patch to fix build with autoconf 2.65; it\'s
a backported combination of svn commits 291283, 291284 and
291332.
- Workaround old php bug http://bugs.php.net/bug.php?id=21153 by
replacing -ledit with -ledit -lncurses in the resulting configure
scripts. This became apparent problem due to libedit being built
with as-needed now.
- Add php5-bug51224.patch to fix buffer overflows happening in
strcpy. It;s a combination of upstream svn revs 284097 and 284099
Sun Jan 17 13:00:00 2010 vuntzAATTopensuse.org
- Remove unneeded gtk-devel BuildRequires.
Mon Jan 11 13:00:00 2010 ajAATTsuse.de
- Remove obsolete build requires of orbit-devel.
Tue Dec 22 13:00:00 2009 jengelhAATTmedozas.de
- avoid alignment crash on alignment-sensitive CPUs
(bugs.php.net#46074)
Wed Dec 2 13:00:00 2009 cooloAATTnovell.com
- update patch to fix build
Tue Oct 6 14:00:00 2009 crrodriguezAATTopensuse.org
- Fixed wrong harcoded mysql socket [bnc#544516]
- Fixed wrong default include_path
Tue Sep 8 14:00:00 2009 crrodriguezAATTsuse.de
- make php5-pear noarch in Factory
Wed Aug 26 14:00:00 2009 crrodriguezAATTsuse.de
- remove obsolete patches
- apply ini patch
- enable mhash compatibility in the hash extension and obsolete php5-mhash
- add macros.php to the source list
Mon Aug 24 14:00:00 2009 crrodriguezAATTsuse.de
- PHP read_exif_data() only returns the first letter of UTF-16 strings [bnc#518300]
Sun Aug 23 14:00:00 2009 crrodriguezAATTsuse.de
- fix missing return values of suhosin extension
Wed Aug 19 14:00:00 2009 crrodriguezAATTnovell.com
- fix build on CODE10 products
Wed Aug 19 14:00:00 2009 crrodriguezAATTnovell.com
- fix horrible broken open_basedir functionality
Sun Aug 16 14:00:00 2009 crrodriguezAATTsuse.de
- update suhosin extension to version 0.9.29
- mysql extensions now use mysqlnd instead of libmysqlclient.
- enable sqlite3 extension, part of the php5-sqlite package
- enable enchant extension
- enable fileinfo extension
- enable intl extension
Fri Aug 14 14:00:00 2009 crrodriguezAATTsuse.de
- add suhosin patch and newer suhosin extension for compatibility
reasons
Thu Aug 13 14:00:00 2009 crrodriguezAATTsuse.de
- Upgrade to PHP 5.3, see http://www.php.net/ChangeLog-5.php
for the huge list of changes
- remove dbase and ncurses extension
Thu Jul 16 14:00:00 2009 cooloAATTnovell.com
- disable as-needed to fix build
Fri Jun 19 14:00:00 2009 crrodriguezAATTsuse.de
- update to PHP 5.2.10
* Fixed bug #48378 (exif_read_data() segfaults on certain corrupted .jpeg files)
* Added \"ignore_errors\" option to http fopen wrapper. (David Zulke, Sara)
* Fixed memory corruptions while reading properties of zip files. (Ilia)
* Fixed memory leak in ob_get_clean/ob_get_flush. (Christian)
* Fixed segfault on invalid session.save_path. (Hannes)
* Fixed leaks in imap when a mail_criteria is used. (Pierre)
* Changed default value of array_unique()\'s optional sorting type parameter back to SORT_STRING to fix backwards compatibility breakage introduced in PHP 5.2.9. (Moriyoshi)
* Fixed bug #47940 (memory leaks in imap_body). (Pierre, Jake Levitt)
* Fixed bug #47903 (\"AATT\" operator does not work with string offsets). (Felipe)
* Fixed bug #47644 (Valid integers are truncated with json_decode()). (Scott)
* Fixed bug #47564 (unpacking unsigned long 32bit big endian returns wrong result). (Ilia)
* Fixed bug #47365 (ip2long() may allow some invalid values on certain 64bit systems).
* Over 100 bug fixes.
Thu May 21 14:00:00 2009 crrodriguezAATTsuse.de
- add temporary backport of openssl prng function
Sat Mar 14 13:00:00 2009 crrodriguezAATTsuse.de
- Update to version 5.2.9, security and bugfix release
* VUL-0: php5: memory disclosure by imagerotate() [bnc#480850]
* VUL-0: php5: mbstring.func_overload set in .htaccess becomes global [bnc#471419]
* Fixed a segfault when malformed string is passed to json_decode()
* Fixed explode() behavior with empty string to respect negative limit.
|
|
|
