|
|
|
|
Changelog for php70-php-dbg-7.0.33-45.el8.remi.x86_64.rpm :
* Tue Nov 26 2024 Remi Collet - 7.0.33-45- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface GHSA-4w77-75f9-2c8w- Fix OOB access in ldap_escape CVE-2024-8932- Fix Integer overflow in the dblib/firebird quoter causing OOB writes CVE-2024-11236- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234- Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 * Thu Sep 26 2024 Remi Collet - 7.0.33-44- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI CVE-2024-4577- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability CVE-2024-8926- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927- Fix Erroneous parsing of multipart form data CVE-2024-8925 * Wed Jul 31 2024 Remi Collet - 7.0.33-43- use oracle client library version 23.5 on x86_64 * Tue Jun 04 2024 Remi Collet - 7.0.33-42- Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 * Wed Apr 10 2024 Remi Collet - 7.0.33-41- use oracle client library version 21.13- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756- Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 * Wed Aug 02 2023 Remi Collet - 7.0.33-40- Fix Security issue with external entity loading in XML without enabling it GHSA-3qrf-m4j2-pcrr CVE-2023-3823- Fix Buffer mismanagement in phar_dir_read() GHSA-jqcx-ccgc-xwhv CVE-2023-3824- move httpd/nginx wants directive to config files in /etc * Wed Jun 21 2023 Remi Collet - 7.0.33-39- fix possible buffer overflow in date- define %php70___phpize and %php70___phpconfig * Wed Jun 07 2023 Remi Collet - 7.0.33-38- Fix Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP GHSA-76gg-c692-v2mw CVE-2023-3247- use oracle client library version 21.10 * Tue Feb 14 2023 Remi Collet - 7.0.33-37- fix #81744: Password_verify() always return true with some hash CVE-2023-0567- fix #81746: 1-byte array overrun in common path resolve code CVE-2023-0568- fix DOS vulnerability when parsing multipart request body CVE-2023-0662 * Tue Dec 20 2022 Remi Collet - 7.0.33-36- pdo: fix #81740: PDO::quote() may return unquoted string CVE-2022-31631- use oracle client library version 21.8 * Tue Sep 27 2022 Remi Collet - 7.0.33-35- phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628- core: fix #81727 Don\'t mangle HTTP variable names that clash with ones that have a specific semantic meaning. CVE-2022-31629- use oracle client library version 21.7 * Tue Jun 07 2022 Remi Collet - 7.0.33-33- use oracle client library version 21.6- mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626- pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625 * Mon Nov 15 2021 Remi Collet - 7.0.33-32- Fix #79971 special character is breaking the path in xml function CVE-2021-21707 * Wed Oct 20 2021 Remi Collet - 7.0.33-31- fix PHP-FPM oob R/W in root process leading to priv escalation CVE-2021-21703- use libicu version 69- use oracle client library version 21.3 * Tue Sep 07 2021 Remi Collet - 7.0.33-30- fix intl build on F35 * Thu Aug 26 2021 Remi Collet - 7.0.33-29- Fix #81211 Symlinks are followed when creating PHAR archive * Mon Jun 28 2021 Remi Collet - 7.0.33-28- Fix #81122 SSRF bypass in FILTER_VALIDATE_URL CVE-2021-21705- Fix #76488 Memory leak when fetching a BLOB field- Fix #76448 Stack buffer overflow in firebird_info_cb- Fix #76449 SIGSEGV in firebird_handle_doer- Fix #76450 SIGSEGV in firebird_stmt_execute- Fix #76452 Crash while parsing blob data in firebird_fetch_blob CVE-2021-21704 * Thu May 27 2021 Remi Collet - 7.0.33-27- fix snmp extension build with net-snmp without DES * Wed Apr 28 2021 Remi Collet - 7.0.33-26- Fix #80710 imap_mail_compose() header injection- use oracle client library version 21.1 * Wed Feb 03 2021 Remi Collet - 7.0.33-25- Fix #80672 Null Dereference in SoapClient CVE-2021-21702- better fix for #77423 * Mon Jan 04 2021 Remi Collet - 7.0.33-24- Fix #77423 FILTER_VALIDATE_URL accepts URLs with invalid userinfo CVE-2020-7071 * Tue Sep 29 2020 Remi Collet - 7.0.33-23- Core: Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070 * Tue Aug 04 2020 Remi Collet - 7.0.33-22- Core: Fix #79877 getimagesize function silently truncates after a null byte- Phar: Fix #79797 use of freed hash key in the phar_parse_zipfile function CVE-2020-7068 * Tue May 12 2020 Remi Collet - 7.0.33-21- Core: Fix #78875 Long filenames cause OOM and temp files are not cleaned CVE-2019-11048 Fix #78876 Long variables in multipart/form-data cause OOM and temp files are not cleaned * Tue Apr 14 2020 Remi Collet - 7.0.33-20- standard: Fix #79330 shell_exec silently truncates after a null byte Fix #79465 OOB Read in urldecode CVE-2020-7067 * Tue Mar 17 2020 Remi Collet - 7.0.33-19- standard: Fix #79329 get_headers() silently truncates after a null byte CVE-2020-7066- exif: Fix #79282 Use-of-uninitialized-value in exif CVE-2020-7064- use oracle client library version 19.6 (18.5 on EL-6) * Tue Feb 18 2020 Remi Collet - 7.0.33-18- dom: Fix #77569 Write Access Violation in DomImplementation- phar: Fix #79082 Files added to tar with Phar::buildFromIterator have all-access permissions CVE-2020-7063- session: Fix #79221 Null Pointer Dereference in PHP Session Upload Progress CVE-2020-7062 * Thu Jan 23 2020 Remi Collet - 7.0.33-17- mbstring: Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060- standard: Fix #79099 OOB read in php_strip_tags_ex CVE-2020-7059 * Tue Dec 17 2019 Remi Collet - 7.0.33-15- bcmath: Fix #78878 Buffer underflow in bc_shift_addsub CVE-2019-11046- core: Fix #78862 link() silently truncates after a null byte on Windows CVE-2019-11044 Fix #78863 DirectoryIterator class silently truncates after a null byte CVE-2019-11045- exif Fix #78793 Use-after-free in exif parsing under memory sanitizer CVE-2019-11050 Fix #78910 Heap-buffer-overflow READ in exif CVE-2019-11047- use oracle client library version 19.5 (18.5 on EL-6) * Tue Oct 22 2019 Remi Collet - 7.0.33-14- FPM: Fix CVE-2019-11043 env_path_info underflow in fpm_main.c * Wed Aug 28 2019 Remi Collet - 7.0.33-13- mbstring: Fix CVE-2019-13224 don\'t allow different encodings for onig_new_deluxe- pcre: Fix #75457 heap use-after-free in pcrelib * Tue Jul 30 2019 Remi Collet - 7.0.33-12- exif: Fix #78256 heap-buffer-overflow on exif_process_user_comment CVE-2019-11042 Fix #78222 heap-buffer-overflow on exif_scan_thumbnail CVE-2019-11041- phar: Fix #77919 Potential UAF in Phar RSHUTDOWN * Tue Jul 02 2019 Remi Collet - 7.0.33-11- use oracle client library version 19.3- disable opcache.huge_code_pages in default configuration * Tue May 28 2019 Remi Collet - 7.0.33-9- iconv: Fix #78069 Out-of-bounds read in iconv.c:_php_iconv_mime_decode() CVE-2019-11039- exif: Fix #77988 Heap-buffer-overflow on php_jpg_get16 CVE-2019-11040- sqlite3: Fix #77967 Bypassing open_basedir restrictions via file uris * Tue Apr 30 2019 Remi Collet - 7.0.33-8- exif: Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG CVE-2019-11036 * Tue Apr 02 2019 Remi Collet - 7.0.33-7- exif: Fix #77753 Heap-buffer-overflow in php_ifd_get32s CVE-2019-11034 Fix #77831 Heap-buffer-overflow in exif_iif_add_value CVE-2019-11035- sqlite3: Added sqlite3.defensive INI directive * Fri Mar 15 2019 Remi Collet - 7.0.33-6- Fix #76846 Segfault in shutdown function after memory limit error * Tue Mar 05 2019 Remi Collet - 7.0.33-5- Fix #77630 rename() across the device may allow unwanted access during processing CVE-2019-9637 * Mon Mar 04 2019 Remi Collet - 7.0.33-4- exif: Fix #77509 Uninitialized read in exif_process_IFD_in_TIFF CVE-2019-9641 Fix #77540 Invalid Read on exif_process_SOFn CVE-2019-9640 Fix #77563 Uninitialized read in exif_process_IFD_in_MAKERNOTE CVE-2019-9638 Fix #77659 Uninitialized read in exif_process_IFD_in_MAKERNOTE CVE-2019-9639- phar: Fix #77396 Null Pointer Dereference in phar_create_or_parse_filename Fix #77586 - phar_tar_writeheaders_int() buffer overflow- spl: Fix #77431 openFile() silently truncates after a null byte * Fri Jan 18 2019 Remi Collet - 7.0.33-3- cleanup for EL-8 * Wed Jan 09 2019 Remi Collet - 7.0.33-2- core: Fix #77369 memcpy with negative length via crafted DNS response CVE-2019-9022- mbstring: Fix #77370 buffer overflow on mb regex functions - fetch_token CVE-2019-9023 Fix #77371 heap buffer overflow in mb regex functions compile_string_node CVE-2019-9023 Fix #77381 heap buffer overflow in multibyte match_at CVE-2019-9023 Fix #77382 heap buffer overflow in expand_case_fold_string CVE-2019-9023 Fix #77385 buffer overflow in fetch_token CVE-2019-9023 Fix #77394 buffer overflow in multibyte case folding - unicode CVE-2019-9023 Fix #77418 heap overflow in utf32be_mbc_to_code CVE-2019-9023- phar: Fix #77247 heap buffer overflow in phar_detect_phar_fname_ext CVE-2019-9021- xmlrpc: Fix #77242 heap out of bounds read in xmlrpc_decode CVE-2019-9020 Fix #77380 global out of bounds read in xmlrpc base64 code CVE-2019-9024 * Wed Dec 05 2018 Remi Collet - 7.0.33-1- Update to 7.0.33 - http://www.php.net/releases/7_0_33.php- use oracle client library version 18.3 * Tue Sep 11 2018 Remi Collet - 7.0.32-1- Update to 7.0.32 - http://www.php.net/releases/7_0_32.php * Thu Aug 23 2018 Remi Collet - 7.0.31-2- F29: backport ICU 62.1 support from 7.1 * Tue Jul 17 2018 Remi Collet - 7.0.31-1- Update to 7.0.31 - http://www.php.net/releases/7_0_31.php * Tue Apr 24 2018 Remi Collet - 7.0.30-1- Update to 7.0.30 - http://www.php.net/releases/7_0_30.php * Wed Mar 28 2018 Remi Collet - 7.0.29-1- Update to 7.0.29 - http://www.php.net/releases/7_0_29.php- FPM: update default pool configuration for process.dumpable * Thu Mar 15 2018 Remi Collet - 7.0.28-2- add file trigger to restart the php-fpm service when new pool or new extension installed (F27+) * Tue Feb 27 2018 Remi Collet - 7.0.28-1- Update to 7.0.28 - http://www.php.net/releases/7_0_28.php- FPM: revert pid file removal- improve devel dependencies * Tue Jan 02 2018 Remi Collet - 7.0.27-1- Update to 7.0.27 - http://www.php.net/releases/7_0_27.php * Tue Dec 05 2017 Remi Collet - 7.0.27~RC1-1- Update to 7.0.27RC1 * Tue Nov 21 2017 Remi Collet - 7.0.26-1- Update to 7.0.26 - http://www.php.net/releases/7_0_26.php * Tue Nov 07 2017 Remi Collet - 7.0.26~RC1-1- Update to 7.0.26RC1 * Tue Oct 24 2017 Remi Collet - 7.0.25-1- Update to 7.0.25 - http://www.php.net/releases/7_0_25.php * Tue Oct 10 2017 Remi Collet - 7.0.25~RC1-1- Update to 7.0.25RC1- oci8 version is now 2.1.8 * Tue Sep 26 2017 Remi Collet - 7.0.24-1- Update to 7.0.24 - http://www.php.net/releases/7_0_24.php * Mon Sep 25 2017 Remi Collet - 7.0.24~RC1-3- F27: php now requires php-fpm and start it with httpd / nginx * Thu Sep 14 2017 Remi Collet - 7.0.24~RC1-2- update builder from RHEL 7.3 to RHEL 7.4 * Tue Sep 12 2017 Remi Collet - 7.0.24~RC1-1- Update to 7.0.24RC1 * Thu Aug 31 2017 Remi Collet - 7.0.23-2- add patch for EL-6, fix undefined symbol: sqlite3_errstr * Tue Aug 29 2017 Remi Collet - 7.0.23-1- Update to 7.0.23 - http://www.php.net/releases/7_0_23.php * Wed Aug 16 2017 Remi Collet - 7.0.23~RC1-2- disable httpd MPM check * Tue Aug 15 2017 Remi Collet - 7.0.23~RC1-1- Update to 7.0.23RC1- oci8 version is now 2.1.7 * Wed Aug 02 2017 Remi Collet - 7.0.22-2- add patch for EL-6, fix undefined symbol: sqlite3_errstr * Wed Aug 02 2017 Remi Collet - 7.0.22-1- Update to 7.0.22 - http://www.php.net/releases/7_0_22.php * Tue Jul 18 2017 Remi Collet - 7.0.22~RC1-1- Update to 7.0.22RC1- oci8 version is now 2.1.6 * Tue Jul 04 2017 Remi Collet - 7.0.21-1- Update to 7.0.21 - http://www.php.net/releases/7_0_21.php * Wed Jun 21 2017 Remi Collet - 7.0.21~RC1-1- Update to 7.0.21RC1- oci8 version is now 2.1.5- use oracle instant client version 12.2 * Tue Jun 06 2017 Remi Collet - 7.0.20-1- Update to 7.0.20 - http://www.php.net/releases/7_0_20.php- add upstream security patches for oniguruma * Tue May 23 2017 Remi Collet - 7.0.20~RC1-1- Update to 7.0.20RC1 * Tue May 09 2017 Remi Collet - 7.0.19-1- Update to 7.0.19 - http://www.php.net/releases/7_0_19.php * Thu Apr 27 2017 Remi Collet - 7.0.19~RC1-2- new sources from new tag * Tue Apr 25 2017 Remi Collet - 7.0.19~RC1-1- Update to 7.0.19RC1- oci8 version is now 2.1.4 * Tue Apr 11 2017 Remi Collet - 7.0.18-1- Update to 7.0.18 - http://www.php.net/releases/7_0_18.php * Tue Mar 28 2017 Remi Collet - 7.0.18-0.1.RC1- Update to 7.0.18RC1 * Tue Mar 14 2017 Remi Collet - 7.0.17-1- Update to 7.0.17 - http://www.php.net/releases/7_0_17.php * Fri Mar 10 2017 Remi Collet - 7.0.17-0.2.RC1- add patch for firebird configuration- add patch for OpenSSL 1.1 on F26 * Tue Feb 28 2017 Remi Collet 7.0.17-0.1.RC1- Update to 7.0.17RC1 * Tue Feb 14 2017 Remi Collet 7.0.16-1- Update to 7.0.16 - http://www.php.net/releases/7_0_16.php * Thu Feb 02 2017 Remi Collet - 7.0.16-0.2.RC1- Update to 7.0.16RC1 (new sources) * Wed Feb 01 2017 Remi Collet 7.0.16-0.1.RC1- Update to 7.0.16RC1 * Tue Jan 17 2017 Remi Collet 7.0.15-1- Update to 7.0.15 - http://www.php.net/releases/7_0_15.php * Thu Jan 05 2017 Remi Collet 7.0.15-0.1.RC1- Update to 7.0.15RC1 * Wed Dec 07 2016 Remi Collet 7.0.14-1- Update to 7.0.14 - http://www.php.net/releases/7_0_14.php- disable pcre.jit everywhere as it raise AVC #1398474 * Wed Nov 23 2016 Remi Collet 7.0.14-0.1.RC1- Update to 7.0.14RC1 * Tue Nov 08 2016 Remi Collet 7.0.13-1- Update to 7.0.13 - http://www.php.net/releases/7_0_13.php * Tue Oct 25 2016 Remi Collet 7.0.13-0.1.RC1- Update to 7.0.13RC1- oci8 version is now 2.1.3- update tzdata patch to v14, improve check for valid tz file * Thu Oct 13 2016 Remi Collet 7.0.12-2- Update to 7.0.12 - http://www.php.net/releases/7_0_12.php- rebuild with new sources * Thu Oct 13 2016 Remi Collet 7.0.12-1- Update to 7.0.12 - http://www.php.net/releases/7_0_12.php * Tue Sep 27 2016 Remi Collet 7.0.12-0.1.RC1- Update to 7.0.12RC1 * Wed Sep 14 2016 Remi Collet 7.0.11-1- Update to 7.0.11 - http://www.php.net/releases/7_0_11.php * Thu Sep 01 2016 Remi Collet 7.0.11-0.1.RC1- Update to 7.0.11RC1 * Wed Aug 31 2016 Remi Collet 7.0.10-1- Update to 7.0.10 - http://www.php.net/releases/7_0_10.php * Wed Aug 03 2016 Remi Collet 7.0.10-0.2.RC1- rebuild with new sources * Wed Aug 03 2016 Remi Collet 7.0.10-0.1.RC1- Update to 7.0.10RC1- relax 2 date tests (failing on EL with system tzdata) * Wed Jul 20 2016 Remi Collet 7.0.9-1- Update to 7.0.9 - http://www.php.net/releases/7_0_9.php- wddx: add upstream patch for https://bugs.php.net/72564 * Wed Jul 06 2016 Remi Collet 7.0.9-0.1.RC1- Update to 7.0.9RC1 * Thu Jun 30 2016 Remi Collet 7.0.8-1.1- own tests/doc directories for pecl packages (f24) * Wed Jun 22 2016 Remi Collet 7.0.8-1- Update to 7.0.8 - http://www.php.net/releases/7_0_8.php * Wed Jun 08 2016 Remi Collet 7.0.8-0.1.RC1- Update to 7.0.8RC1- opcache version is now php version * Wed May 25 2016 Remi Collet 7.0.7-1- Update to 7.0.7 - http://www.php.net/releases/7_0_7.php * Thu May 12 2016 Remi Collet 7.0.7-0.1.RC1- Update to 7.0.7RC1- oci8 version is now 2.1.1 * Thu Apr 28 2016 Remi Collet 7.0.6-3- Update to 7.0.6 - http://www.php.net/releases/7_0_6.php- rebuild for new sources * Wed Apr 27 2016 Remi Collet 7.0.6-2- Update to 7.0.6 http://www.php.net/releases/7_0_6.php * Tue Apr 12 2016 Remi Collet 7.0.6-0.2.RC1- Update to 7.0.6RC1 * Fri Apr 08 2016 Remi Collet 7.0.5-2- Fixed bug #71914 (Reference is lost in \"switch\") * Wed Mar 30 2016 Remi Collet 7.0.5-1- Update to 7.0.5 http://www.php.net/releases/7_0_5.php * Wed Mar 16 2016 Remi Collet 7.0.5-0.1.RC1- Update to 7.0.5RC1 * Sun Mar 06 2016 Remi Collet 7.0.4-2- adapt for F24: define %pecl_xmldir and own it * Wed Mar 02 2016 Remi Collet 7.0.4-1- Update to 7.0.4 http://www.php.net/releases/7_0_4.php- pcre: disables JIT compilation of patterns with system pcre < 8.38 * Thu Feb 18 2016 Remi Collet 7.0.4-0.1.RC1- Update to 7.0.4RC1 * Wed Feb 03 2016 Remi Collet 7.0.3-1- Update to 7.0.3 http://www.php.net/releases/7_0_3.php * Fri Jan 29 2016 Remi Collet 7.0.3-0.3.20160129gitdd3d10c- test build * Fri Jan 29 2016 Remi Collet 7.0.3-0.2.RC1- FPM: test build for https://bugs.php.net/62172 * Wed Jan 20 2016 Remi Collet 7.0.3-0.1.RC1- Update to 7.0.3RC1 * Wed Jan 06 2016 Remi Collet 7.0.2-1- Update to 7.0.2 http://www.php.net/releases/7_0_2.php * Sun Dec 27 2015 Remi Collet 7.0.2-0.1.RC1- Update to 7.0.2RC1- opcache: build with --disable-huge-code-pages on EL-6 * Wed Dec 16 2015 Remi Collet 7.0.1-1- Update to 7.0.1 http://www.php.net/releases/7_0_1.php- curl: add CURL_SSLVERSION_TLSv1_x constant (EL)- fpm: switch to UDS on Fedora >= 21 * Wed Dec 09 2015 Remi Collet 7.0.1-0.1.RC1- Update to 7.0.1RC1- drop --disable-huge-code-pages build option on EL-6, but keep it disabled in default configuration * Thu Dec 03 2015 Remi Collet 7.0.0-2- build with --disable-huge-code-pages on EL-6 * Tue Dec 01 2015 Remi Collet 7.0.0-1- Update to 7.0.0 http://www.php.net/releases/7_0_0.php * Mon Nov 30 2015 Remi Collet 7.0.0-0.26.RC8- set opcache.huge_code_pages=0 on EL-6 see https://bugs.php.net/70973 and https://bugs.php.net/70977 * Wed Nov 25 2015 Remi Collet 7.0.0-0.25.RC8- Update to 7.0.0RC8- set opcache.huge_code_pages=1 on x86_64 * Thu Nov 12 2015 Remi Collet 7.0.0-0.24.RC7- Update to 7.0.0RC7 (retagged) * Wed Nov 11 2015 Remi Collet 7.0.0-0.23.RC7- Update to 7.0.0RC7 * Wed Oct 28 2015 Remi Collet 7.0.0-0.22.RC6- Update to 7.0.0RC6 * Mon Oct 19 2015 Remi Collet 7.0.0-0.21.RC5- php-config: reports all built sapis * Wed Oct 14 2015 Remi Collet 7.0.0-0.20.RC5- rebuild as retagged * Tue Oct 13 2015 Remi Collet 7.0.0-0.19.RC5- Update to 7.0.0RC5- update php-fpm.d/www.conf comments- API and Zend API are now set to 20151012 * Wed Sep 30 2015 Remi Collet 7.0.0-0.18.RC4- Update to 7.0.0RC4- php-fpm: set http authorization headers * Fri Sep 18 2015 Remi Collet 7.0.0-0.17.RC3- F23 rebuild with rh_layout * Wed Sep 16 2015 Remi Collet 7.0.0-0.16.RC3- Update to 7.0.0RC3- disable zip extension (provided in php-pecl-zip) * Fri Sep 04 2015 Remi Collet 7.0.0-0.15.RC2- Update to 7.0.0RC2- enable oci8 and pdo_oci extensions- sync php.ini with upstream php.ini-production * Sat Aug 22 2015 Remi Collet 7.0.0-0.14.RC1- Update to 7.0.0RC1 * Wed Aug 05 2015 Remi Collet 7.0.0-0.13.beta3- Update to 7.0.0beta3 * Wed Jul 22 2015 Remi Collet 7.0.0-0.12.beta2- Update to 7.0.0beta2- switch from libvpx to libwebp (only for bundled libgd, not used) * Wed Jul 08 2015 Remi Collet 7.0.0-0.11.beta1- Update to 7.0.0beta1- use upstream tarball instead of git snapshot * Wed Jun 24 2015 Remi Collet 7.0.0-0.10.alpha2- Update to 7.0.0alpha2- use new layout (/etc/opt, /var/opt) * Wed Jun 17 2015 Remi Collet 7.0.0-0.9.20150617git3697f02- new snapshot * Thu Jun 11 2015 Remi Collet 7.0.0-0.9.20150611git8cfe282- new snapshot- the phar link is now correctly created * Tue Jun 09 2015 Remi Collet 7.0.0-0.8.alpha1- Update to 7.0.0alpha1 * Tue Jun 02 2015 Remi Collet 7.0.0-0.7.20150602git8a089e7- new snapshot * Fri May 29 2015 Remi Collet 7.0.0-0.7.20150525git6f46fa3- new snapshot- t1lib support have been removed * Mon May 25 2015 Remi Collet 7.0.0-0.6.20150525git404360f- new snapshot * Mon May 18 2015 Remi Collet 7.0.0-0.6.20150518gitcee8857- new snapshot * Sat May 16 2015 Remi Collet 7.0.0-0.6.20150515gitc9f27ee- new snapshot * Tue Apr 28 2015 Remi Collet 7.0.0-0.6.20150507gitdd0b602- add experimental file based opcode cache (disabled by default) * Tue Apr 28 2015 Remi Collet 7.0.0-0.5.20150428git94f0b94- new snapshot * Mon Apr 27 2015 Remi Collet 7.0.0-0.5.20150427git1a4d3e4- new snapshot- adapt system tzdata patch for upstream change for new zic * Sat Apr 18 2015 Remi Collet 7.0.0-0.5.20150418git1f0a624- new snapshot * Thu Apr 16 2015 Remi Collet 7.0.0-0.5.20150416gitc77d97f- new snapshot * Fri Apr 03 2015 Remi Collet 7.0.0-0.5.20150403gitadcf0c6- new snapshot * Tue Mar 31 2015 Remi Collet 7.0.0-0.4.20150331git463ca30- rename 10-php70-php.conf to 15-php70-php.conf to ensure load order (after 10-rh-php56-php.conf) * Wed Mar 25 2015 Remi Collet 7.0.0-0.3.20150325git2fe6acd- rebuild * Wed Mar 25 2015 Remi Collet 7.0.0-0.2.20150325git23336d7- fix mod_php configuration- disable static json- sync php.ini with upstream php.ini-production * Wed Mar 25 2015 Remi Collet 7.0.0-0.1.20150325git23336d7- update for php 7.0.0- ereg, mssql, mysql and sybase_ct extensions are removed- add pdo-dblib subpackage (instead of php-mssql)- disable oci8 extension, not yet adapted for 7.0- add php-zip subpackage- add php-json subpackage * Thu Mar 19 2015 Remi Collet 5.6.7-1- Update to 5.6.7 http://www.php.net/releases/5_6_7.php * Sun Mar 08 2015 Remi Collet 5.6.7-0.1.RC1- update to 5.6.7RC1 * Thu Feb 19 2015 Remi Collet 5.6.6-1- Update to 5.6.6 http://www.php.net/releases/5_6_6.php * Wed Jan 21 2015 Remi Collet 5.6.5-1- Update to 5.6.5 http://www.php.net/releases/5_6_5.php * Tue Jan 20 2015 Remi Collet 5.6.5-0.2.RC1- fix php-fpm.service.d location * Fri Jan 09 2015 Remi Collet 5.6.5-0.1.RC1- update to 5.6.5RC1- add base system path in default include path- FPM: enable ACL for Unix Domain Socket * Wed Dec 17 2014 Remi Collet 5.6.4-2- Update to 5.6.4 http://www.php.net/releases/5_6_4.php- add sybase_ct extension (in mssql sub-package)- xmlrpc requires xml * Wed Dec 10 2014 Remi Collet 5.6.4-1- Update to 5.6.4 http://www.php.net/releases/5_6_4.php * Thu Nov 27 2014 Remi Collet 5.6.4-0.1.RC1- update to 5.6.4RC1 * Wed Nov 26 2014 Remi Collet 5.6.3-3- add embedded sub package- filter all libraries to avoid provides * Sun Nov 16 2014 Remi Collet 5.6.3-2- FPM: add upstream patch for https://bugs.php.net/68421 access.format=R doesn\'t log ipv6 address- FPM: add upstream patch for https://bugs.php.net/68420 listen=9000 listens to ipv6 localhost instead of all addresses- FPM: add upstream patch for https://bugs.php.net/68423 will no longer load all pools * Thu Nov 13 2014 Remi Collet 5.6.3-1- Update to PHP 5.6.3 http://php.net/releases/5_6_3.php * Sun Nov 02 2014 Remi Collet 5.6.3-0.1.RC1- update to 5.6.3RC1- new version of systzdata patch, fix case sensitivity- ignore Factory in date tests- disable opcache.fast_shutdown in default config- add php56-cgi command in base system * Thu Oct 16 2014 Remi Collet 5.6.2-1- Update to PHP 5.6.2 http://php.net/releases/5_6_2.php * Fri Oct 03 2014 Remi Collet 5.6.1-1- Update to PHP 5.6.1 http://php.net/releases/5_6_1.php- use default system cipher list by Fedora policy http://fedoraproject.org/wiki/Changes/CryptoPolicy- add system php library to default include_path * Fri Aug 29 2014 Remi Collet 5.6.0-1.1- enable libvpx on EL 6 (with libvpx 1.3.0)- add php56-phpdbg command in base system * Thu Aug 28 2014 Remi Collet 5.6.0-1- PHP 5.6.0 is GA- add lsphp56 command in base system * Sun Aug 24 2014 Remi Collet - 5.6.0-0.1.RC4- initial spec for PHP 5.6 as Software Collection- adapted from php 5.6 spec file from remi repository- adapted from php 5.5 spec file from rhscl 1.1 * Tue May 13 2014 Remi Collet - 5.5.6-10- fileinfo: fix out-of-bounds memory access CVE-2014-2270- fileinfo: fix extensive backtracking CVE-2013-7345 * Fri Mar 21 2014 Remi Collet - 5.5.6-9- gd: fix NULL deref in imagecrop CVE-2013-7327- gd: drop vpx support, fix huge memory consumption #1075201 * Fri Feb 21 2014 Remi Collet - 5.5.6-8- fix patch name- fix memory leak introduce in patch for CVE-2014-1943- fix heap-based buffer over-read in DateInterval CVE-2013-6712 * Wed Feb 19 2014 Remi Collet - 5.5.6-7- fix infinite recursion in fileinfo CVE-2014-1943 * Fri Feb 14 2014 Remi Collet - 5.5.6-6- fix heap overflow vulnerability in imagecrop CVE-2013-7226 * Tue Feb 04 2014 Remi Collet - 5.5.6-5- allow multiple paths in ini_scan_dir #1058161 * Fri Dec 06 2013 Remi Collet - 5.5.6-4- add security fix for CVE-2013-6420 * Tue Nov 19 2013 Remi Collet 5.5.6-2- rebuild with test enabled- add dependency on php-pecl-jsonc * Tue Nov 19 2013 Remi Collet 5.5.6-0- update to PHP 5.5.6- buildstrap build * Thu Oct 17 2013 Remi Collet 5.5.5-1- update to PHP 5.5.5- mod_php only for httpd24 * Thu Sep 19 2013 Remi Collet 5.5.4-1- update to PHP 5.5.4- improve security, use specific soap.wsdl_cache_dir use /var/lib/php/wsdlcache for mod_php and php-fpm- sync short_tag comments in php.ini with upstream- relocate RPM macro * Wed Aug 21 2013 Remi Collet 5.5.3-1- update to PHP 5.5.3- improve system libzip patch- fix typo and add missing entries in php.ini * Fri Aug 02 2013 Remi Collet 5.5.1-1- update to PHP 5.5.1 for php55 SCL * Mon Jul 29 2013 Remi Collet 5.4.16-6- rebuild for new httpd-mmn value * Mon Jul 29 2013 Remi Collet 5.4.16-5- remove ZTS conditional stuf for ligibility- add mod_php for apache 2.4 (from httpd24 collection) * Thu Jul 18 2013 Remi Collet 5.4.16-4- improve mod_php, pgsql and ldap description- add missing man pages (phar, php-cgi)- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)- use %__isa_bits instead of %__isa in ABI suffix #985350 * Fri Jul 12 2013 Remi Collet - 5.4.16-3- add security fix for CVE-2013-4113- add missing ASL 1.0 license * Fri Jun 07 2013 Remi Collet 5.4.16-2- run tests during build * Fri Jun 07 2013 Remi Collet 5.4.16-1- rebase to 5.4.16- fix hang in FindTishriMolad(), #965144- patch for upstream Bug #64915 error_log ignored when daemonize=0- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103- patch for upstream bug #64960 Segfault in gc_zval_possible_root * Thu May 23 2013 Remi Collet 5.4.14-3- remove wrappers in /usr/bin (#966407) * Thu Apr 25 2013 Remi Collet 5.4.14-2- rebuild for libjpeg (instead of libjpeg_turbo)- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) * Thu Apr 11 2013 Remi Collet 5.4.14-1- update to 5.4.14- clean old deprecated options * Wed Mar 13 2013 Remi Collet 5.4.13-1- update to 5.4.13- security fixes for CVE-2013-1635 and CVE-2013-1643- make php-mysql package optional (and disabled)- make ZTS build optional (and disabled)- always try to load mod_php (apache warning is usefull)- Hardened build (links with -z now option)- Remove %config from /etc/rpm/macros.php * Wed Jan 16 2013 Remi Collet 5.4.11-1- update to 5.4.11- fix php.conf to allow MultiViews managed by php scripts * Wed Dec 19 2012 Remi Collet 5.4.10-1- update to 5.4.10- remove patches merged upstream- drop \"Configure Command\" from phpinfo output- prevent php_config.h changes across (otherwise identical) rebuilds * Thu Nov 22 2012 Remi Collet 5.4.9-1- update to 5.4.9 * Mon Nov 19 2012 Remi Collet 5.4.8-7- fix php.conf * Mon Nov 19 2012 Remi Collet 5.4.8-6- filter private shared in _httpd_modir- improve system libzip patch to use pkg-config- use _httpd_contentdir macro and fix php.gif path- switch back to upstream generated scanner/parser- use system pcre only when recent enough * Fri Nov 16 2012 Remi Collet 5.4.8-5- improves php.conf, no need to be relocated * Fri Nov 09 2012 Remi Collet 5.4.8-6- clarify Licenses- missing provides xmlreader and xmlwriter- change php embedded library soname version to 5.4 * Mon Nov 05 2012 Remi Collet 5.4.8-4- fix mysql_sock macro definition * Thu Oct 25 2012 Remi Collet 5.4.8-4- fix standard build (non scl) * Thu Oct 25 2012 Remi Collet 5.4.8-3- fix installed headers * Tue Oct 23 2012 Joe Orton - 5.4.8-2- use libldap_r for ldap extension * Tue Oct 23 2012 Remi Collet 5.4.8-3- add missing scl_prefix in some provides/requires * Tue Oct 23 2012 Remi Collet 5.4.8-2.1- make php-enchant optionnal, not available on RHEL-5- make php-recode optionnal, not available on RHEL-5- disable t1lib on RHEL-5 * Tue Oct 23 2012 Remi Collet 5.4.8-2- enable tidy on RHEL-6 only- re-enable unit tests * Tue Oct 23 2012 Remi Collet 5.4.8-1.2- minor macro fixes for RHEL-5 build- update autotools workaround for RHEL-5- use readline when libedit not available (RHEL-5) * Mon Oct 22 2012 Remi Collet 5.4.8-1- update to 5.4.8- define both session.save_handler and session.save_path- fix possible segfault in libxml (#828526)- use SKIP_ONLINE_TEST during make test- php-devel requires pcre-devel and php-cli (instead of php)- provides php-phar- update systzdata patch to v10, timezone are case insensitive * Mon Oct 15 2012 Remi Collet 5.4.7-4- php-fpm: create apache user if needed- php-cli: provides cli command in standard root (scl) * Fri Oct 12 2012 Remi Collet 5.4.7-3- add configtest option to init script- test configuration before service reload- fix php-fpm service relocation- fix php-fpm config relocation- drop embdded subpackage for scl * Wed Oct 03 2012 Remi Collet 5.4.7-2- missing requires on scl-runtime- relocate /var/lib/session- fix php-devel requires- rename, but don\'t relocate macros.php * Tue Oct 02 2012 Remi Collet 5.4.7-1- initial spec rewrite for scl build * Mon Oct 01 2012 Remi Collet 5.4.7-10- fix typo in systemd macro * Mon Oct 01 2012 Remi Collet 5.4.7-9- php-fpm: enable PrivateTmp- php-fpm: new systemd macros (#850268)- php-fpm: add upstream patch for startup issue (#846858) * Fri Sep 28 2012 Remi Collet 5.4.7-8- systemd integration, https://bugs.php.net/63085- no odbc call during timeout, https://bugs.php.net/63171- check sqlite3_column_table_name, https://bugs.php.net/63149 * Mon Sep 24 2012 Remi Collet 5.4.7-7- most failed tests explained (i386, x86_64) * Wed Sep 19 2012 Remi Collet 5.4.7-6- fix for http://bugs.php.net/63126 (#783967) * Wed Sep 19 2012 Remi Collet 5.4.7-5- patch to ensure we use latest libdb (not libdb4) * Wed Sep 19 2012 Remi Collet 5.4.7-4- really fix rhel tests (use libzip and libdb) * Tue Sep 18 2012 Remi Collet 5.4.7-3- fix test to enable zip extension on RHEL-7 * Mon Sep 17 2012 Remi Collet 5.4.7-2- remove session.save_path from php.ini move it to apache and php-fpm configuration files * Fri Sep 14 2012 Remi Collet 5.4.7-1- update to 5.4.7 http://www.php.net/releases/5_4_7.php- php-fpm: don\'t daemonize * Mon Aug 20 2012 Remi Collet 5.4.6-2- enable php-fpm on secondary arch (#849490) * Fri Aug 17 2012 Remi Collet 5.4.6-1- update to 5.4.6- update to v9 of systzdata patch- backport fix for new libxml * Fri Jul 20 2012 Remi Collet 5.4.5-1- update to 5.4.5 * Mon Jul 02 2012 Remi Collet 5.4.4-4- also provide php(language)%{_isa}- define %{php_version} * Mon Jul 02 2012 Remi Collet 5.4.4-3- drop BR for libevent (#835671)- provide php(language) to allow version check * Thu Jun 21 2012 Remi Collet 5.4.4-2- add missing provides (core, ereg, filter, standard) * Thu Jun 14 2012 Remi Collet 5.4.4-1- update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d- use /run/php-fpm instead of /var/run/php-fpm * Wed May 09 2012 Remi Collet 5.4.3-1- update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) * Thu May 03 2012 Remi Collet 5.4.2-1- update to 5.4.2 (CVE-2012-1823) * Fri Apr 27 2012 Remi Collet 5.4.1-1- update to 5.4.1 * Wed Apr 25 2012 Joe Orton - 5.4.0-6- rebuild for new icu- switch (conditionally) to libdb-devel * Sat Mar 31 2012 Remi Collet 5.4.0-5- fix Loadmodule with MPM event (use ZTS if not MPM worker)- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 * Thu Mar 29 2012 Joe Orton - 5.4.0-4- rebuild for missing automatic provides (#807889) * Mon Mar 26 2012 Joe Orton - 5.4.0-3- really use _httpd_mmn * Mon Mar 26 2012 Joe Orton - 5.4.0-2- rebuild against httpd 2.4- use _httpd_mmn, _httpd_apxs macros * Fri Mar 02 2012 Remi Collet 5.4.0-1- update to PHP 5.4.0 finale * Sat Feb 18 2012 Remi Collet 5.4.0-0.4.RC8- update to PHP 5.4.0RC8 * Sat Feb 04 2012 Remi Collet 5.4.0-0.3.RC7- update to PHP 5.4.0RC7- provides env file for php-fpm (#784770)- add patch to use system libzip (thanks to spot)- don\'t provide INSTALL file | |