Changelog for php53-common-5.3.3-23.el5_10.i386.rpm :

* Fri Jul 18 2014 Remi Collet - 5.3.3-23- core: type confusion issue in phpinfo(). CVE-2014-4721- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712- core: fix heap-based buffer overflow in DNS TXT record parsing. CVE-2014-4049- core: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw. CVE-2014-3515- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270- fileinfo: unrestricted recursion in handling of indirect type rules. CVE-2014-1943- fileinfo: out of bounds read in CDF parser. CVE-2012-1571- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480- fileinfo: cdf_unpack_summary_info() excessive looping DoS. CVE-2014-0237- fileinfo: CDF property info parsing nelements infinite loop. CVE-2014-0238
* Fri Dec 06 2013 Remi Collet - 5.3.3-22- add security fix for CVE-2013-6420
* Tue Aug 20 2013 Remi Collet - 5.3.3-21- add security fix for CVE-2013-4248
* Sat Jul 13 2013 Remi Collet - 5.3.3-20- add security fix for CVE-2013-4113
* Thu May 23 2013 Remi Collet - 5.3.3-19- add upstream reproducer for error_handler (#951075)
* Sat May 04 2013 Remi Collet - 5.3.3-18- add security fixes for CVE-2006-7243
* Sat May 04 2013 Remi Collet - 5.3.3-17- reorder security patches- add security fixes for CVE-2012-2688, CVE-2012-0831, CVE-2011-1398, CVE-2013-1643
* Tue Apr 23 2013 Remi Collet - 5.3.3-15- fix segfault in error_handler with allow_call_time_pass_reference = Off (#951075)- fix double free when destroy_zend_class fails (#951076)
* Sat Apr 20 2013 Remi Collet - 5.3.3-14- fix possible buffer overflow in pdo_odbc (#869694)- rename php-5.3.3-extrglob.patch and reorder- php script hangs when it exceeds max_execution_time when inside an ODBC call (#864954)- fix zend garbage collector (#892695)- fix transposed memset arguments in libzip (#953818)- fix possible segfault in pdo_mysql (#869693)- fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859369)- fix stream support in fileinfo (#869697)- fix setDate when DateTime created from timestamp (#869691)- fix permission on source files (#869688)- add php(language) and missing provides (#837044)- fix copy doesn\'t report failure on partial copy (#951413)
* Tue Jun 26 2012 Joe Orton - 5.3.3-13- add security fix for CVE-2010-2950
* Thu Jun 14 2012 Joe Orton - 5.3.3-11- fix tests for CVE-2012-2143, CVE-2012-0789
* Wed Jun 13 2012 Joe Orton - 5.3.3-10- add security fix for CVE-2012-2336
* Wed Jun 13 2012 Joe Orton - 5.3.3-9- add security fixes for CVE-2011-4153, CVE-2012-0057, CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386
* Fri May 04 2012 Joe Orton - 5.3.3-7- correct detection of = in CVE-2012-1823 fix (#818607)
* Fri May 04 2012 Joe Orton - 5.3.3-6- add security fix for CVE-2012-1823 (#818607)
* Fri Feb 03 2012 Joe Orton - 5.3.3-5- add security fix for CVE-2012-0830 (#786758)
* Thu Jan 05 2012 Vojtech Vitek (V-Teq) - 5.3.3-4- remove extra php.ini-prod/devel files caused by %patch -b
* Wed Jan 04 2012 Vojtech Vitek (V-Teq) - 5.3.3-3- add security fixes for CVE-2011-4885, CVE-2011-4566 (#740734)
* Sat Oct 29 2011 Joe Orton - 5.3.3-2- add php-$subpkg = V-R provides (#717158)- add security fixes for CVE-2010-3710, CVE-2010-4156, CVE-2010-4645 (#670464)- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1471, CVE-2011-1938, CVE-2011-2202 (#740734)- fix negative keys with var_export (#700724)
* Thu Dec 02 2010 Joe Orton - 5.3.3-1- update to 5.3.3 (#658315)
* Tue Nov 23 2010 Joe Orton - 5.3.2-7- prevent extract() from clobering $GLOBALS (#655330)
* Thu Nov 11 2010 Joe Orton - 5.3.2-6- add security fixes for CVE-2010-3870 CVE-2010-3709 (#650877)- provide php-devel from -devel (#642701)
* Tue Nov 02 2010 Joe Orton - 5.3.2-5- use correct mysql_config for pdo-mysql also (#642701)
* Fri Oct 01 2010 Joe Orton - 5.3.2-4- use mysql_config from libdir
* Wed Sep 08 2010 Joe Orton - 5.3.2-3- add defattr for -mbstring and -bcmath
* Wed Sep 08 2010 Joe Orton - 5.3.2-2- add LGPLv2{,+} to License; ship text in -bcmath, -mbstring- apply phar patch correctly- fix permissions on sources, README.namespaces- drop EXTENSIONS from %doc- fix Provides for php-cli- drop inappropriate/obsolete Obsoletes
* Fri Sep 03 2010 Joe Orton - 5.3.2-1- convert to php53- remove subpackages: embeded, zts, tidy, recode, enchant
* Wed Aug 18 2010 Joe Orton - 5.3.2-6- add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917, CVE-2010-2531, MOPS-2010-060 (#624469)
* Sat Aug 14 2010 Joe Orton - 5.3.2-5- add security fix for CVE-2010-0397 (#575712)
* Fri Jun 25 2010 Joe Orton - 5.3.2-4- add security fix for CVE-2010-2225 (#605644)
* Thu May 06 2010 Joe Orton - 5.3.2-3- restore -imap (#586050)
* Sat Mar 27 2010 Joe Orton - 5.3.2-2- remove mcrypt support (#459804, #577257)
* Thu Mar 25 2010 Joe Orton - 5.3.2-1- update to 5.3.2 (#575158, #575712)
* Sun Mar 07 2010 Remi Collet - PHP 5.3.2 Released!- remove mime_magic option (now provided by fileinfo, by emu)- add patch for http://bugs.php.net/50578- remove patch for libedit (upstream)
* Sat Jan 16 2010 Joe Orton - 5.3.1-7- add security fix for CVE-2009-4142 (#552268)
* Sat Dec 19 2009 Joe Orton - 5.3.1-6- drop mssql, pdo_dblib
* Sat Dec 12 2009 Joe Orton - 5.3.1-5- drop imap
* Sat Dec 12 2009 Joe Orton - 5.3.1-4- drop t1lib, interbase/firebird support
* Sat Nov 28 2009 Joe Orton - 5.3.1-3- update to v7 of systzdata patch
* Thu Nov 26 2009 Joe Orton - 5.3.1-2- fix build with autoconf 2.6x
* Sat Nov 21 2009 Remi Collet 5.3.1-1- update to 5.3.1- remove openssl patch (merged upstream)- add provides for php-pecl-json- add prod/devel php.ini in doc
* Wed Nov 18 2009 Tom \"spot\" Callaway - 5.3.0-7- use libedit instead of readline to resolve licensing issues
* Wed Aug 26 2009 Tomas Mraz - 5.3.0-6- rebuilt with new openssl
* Mon Jul 27 2009 Fedora Release Engineering - 5.3.0-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Fri Jul 17 2009 Joe Orton 5.3.0-4- rediff systzdata patch
* Fri Jul 17 2009 Joe Orton 5.3.0-3- update to v6 of systzdata patch; various fixes
* Wed Jul 15 2009 Joe Orton 5.3.0-2- update to v5 of systzdata patch; parses zone.tab and extracts timezone->{country-code,long/lat,comment} mapping table
* Mon Jul 13 2009 Remi Collet 5.3.0-1- update to 5.3.0- remove ncurses, dbase, mhash extensions- add enchant, sqlite3, intl, phar, fileinfo extensions- raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)- sync with upstream \"production\" php.ini
* Mon Jun 22 2009 Remi Collet 5.2.10-1- update to 5.2.10- add interbase sub-package
* Sun Mar 01 2009 Remi Collet - 5.2.9-1- update to 5.2.9
* Fri Feb 27 2009 Fedora Release Engineering - 5.2.8-10- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Fri Feb 06 2009 Joe Orton 5.2.8-9- add recode support, -recode subpackage (#106755)- add -zts subpackage with ZTS-enabled build of httpd SAPI- adjust php.conf to use -zts SAPI build for worker MPM
* Thu Feb 05 2009 Joe Orton 5.2.8-8- fix patch fuzz, renumber patches
* Thu Feb 05 2009 Joe Orton 5.2.8-7- drop obsolete configure args- drop -odbc patch (#483690)
* Tue Jan 27 2009 Joe Orton 5.2.8-5- split out sysvshm, sysvsem, sysvmsg, posix into php-process
* Mon Jan 26 2009 Joe Orton 5.2.8-4- move wddx to php-xml, build curl shared in -common- remove BR for expat-devel, bogus configure option
* Sat Jan 24 2009 Joe Orton 5.2.8-3- rebuild for new MySQL
* Sun Dec 14 2008 Remi Collet 5.2.8-2- libtool 2 workaround for phpize (#476004)- add missing php_embed.h (#457777)
* Wed Dec 10 2008 Remi Collet 5.2.8-1- update to 5.2.8
* Sun Dec 07 2008 Remi Collet 5.2.7-1.1- libtool 2 workaround
* Sat Dec 06 2008 Remi Collet 5.2.7-1- update to 5.2.7- enable pdo_dblib driver in php-mssql
* Tue Nov 25 2008 Joe Orton 5.2.6-7- tweak Summary, thanks to Richard Hughes
* Wed Nov 05 2008 Joe Orton 5.2.6-6- move gd_README to php-gd- update to r4 of systzdata patch; introduces a default timezone name of \"System/Localtime\", which uses /etc/localtime (#469532)
* Sun Sep 14 2008 Remi Collet 5.2.6-5- enable XPM support in php-gd- Fix BR for php-gd
* Mon Jul 21 2008 Remi Collet 5.2.6-4- enable T1lib support in php-gd
* Tue Jul 15 2008 Joe Orton 5.2.6-3- update to 5.2.6- sync default php.ini with upstream- drop extension_dir from default php.ini, rely on hard-coded default, to make php-common multilib-safe (#455091)- update to r3 of systzdata patch
* Fri Apr 25 2008 Joe Orton 5.2.5-7- split pspell extension out into php-spell (#443857)
* Wed Feb 20 2008 Fedora Release Engineering - 5.2.5-6- Autorebuild for GCC 4.3
* Sat Jan 12 2008 Joe Orton 5.2.5-5- ext/date: use system timezone database
* Sat Dec 29 2007 Joe Orton 5.2.5-4- rebuild for libc-client bump
* Thu Dec 06 2007 Release Engineering - 5.2.5-3- Rebuild for openssl bump
* Thu Dec 06 2007 Joe Orton 5.2.5-2- update to 5.2.5
* Tue Oct 16 2007 Joe Orton 5.2.4-3- correct pcre BR version (#333021)- restore metaphone fix (#205714)- add READMEs to php-cli
* Mon Sep 17 2007 Joe Orton 5.2.4-2- update to 5.2.4
* Mon Sep 03 2007 Joe Orton 5.2.3-9- rebuild for fixed APR
* Wed Aug 29 2007 Joe Orton 5.2.3-8- add ldconfig post/postun for -embedded (Hans de Goede)
* Sat Aug 11 2007 Hans de Goede 5.2.3-7- add php-embedded sub-package
* Sat Aug 11 2007 Joe Orton 5.2.3-6- fix build with new glibc- fix License
* Tue Jul 17 2007 Joe Orton 5.2.3-5- define php_extdir in macros.php
* Tue Jul 03 2007 Joe Orton 5.2.3-4- obsolete php-dbase
* Wed Jun 20 2007 Joe Orton 5.2.3-3- add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)- enable dbase extension and package in -common
* Sat Jun 09 2007 Joe Orton 5.2.3-2- update to 5.2.3 (thanks to Jeff Sheltren)
* Thu May 10 2007 Joe Orton 5.2.2-4- fix php-pdo
*_arg_force_ref global symbol abuse (#216125)
* Wed May 09 2007 Joe Orton 5.2.2-3- rebuild against uw-imap-devel
* Sat May 05 2007 Joe Orton 5.2.2-2- update to 5.2.2- synch changes from upstream recommended php.ini
* Fri Mar 30 2007 Joe Orton 5.2.1-5- enable SASL support in LDAP extension (#205772)
* Thu Mar 22 2007 Joe Orton 5.2.1-4- drop mime_magic extension (deprecated by php-pecl-Fileinfo)
* Tue Feb 20 2007 Joe Orton 5.2.1-3- fix regression in str_{i,}replace (from upstream)
* Fri Feb 16 2007 Joe Orton 5.2.1-2- update to 5.2.1- add Requires(pre) for httpd- trim %changelog to versions >= 5.0.0
* Fri Feb 09 2007 Joe Orton 5.2.0-10- bump default memory_limit to 32M (#220821)- mark config files noreplace again (#174251)- drop trailing dots from Summary fields- use standard BuildRoot- drop libtool15 patch (#226294)
* Wed Jan 31 2007 Joe Orton 5.2.0-9- add php(api), php(zend-abi) provides (#221302)- package /usr/share/php and append to default include_path (#225434)
* Wed Dec 06 2006 Joe Orton 5.2.0-8- fix filter.h installation path- fix php-zend-abi version (Remi Collet, #212804)
* Wed Nov 29 2006 Joe Orton 5.2.0-7- rebuild again
* Wed Nov 29 2006 Joe Orton 5.2.0-6- rebuild for net-snmp soname bump
* Tue Nov 28 2006 Joe Orton 5.2.0-5- build json and zip shared, in -common (Remi Collet, #215966)- obsolete php-json and php-pecl-zip- build readline extension into /usr/bin/php
* (#210585)- change module subpackages to require php-common not php (#177821)
* Thu Nov 16 2006 Joe Orton 5.2.0-4- provide php-zend-abi (#212804)- add /etc/rpm/macros.php exporting interface versions- synch with upstream recommended php.ini
* Thu Nov 16 2006 Joe Orton 5.2.0-3- update to 5.2.0 (#213837)- php-xml provides php-domxml (#215656)- fix php-pdo-abi provide (#214281)
* Wed Nov 01 2006 Joseph Orton 5.1.6-4- rebuild for curl soname bump- add build fix for curl 7.16 API
* Thu Oct 05 2006 Joe Orton 5.1.6-3- from upstream: add safety checks against integer overflow in _ecalloc
* Wed Aug 30 2006 Joe Orton 5.1.6-2- update to 5.1.6 (security fixes)- bump default memory_limit to 16M (#196802)
* Thu Jul 13 2006 Jesse Keating - 5.1.4-8.1- rebuild
* Sat Jun 10 2006 Joe Orton 5.1.4-8- Provide php-posix (#194583)- only provide php-pcntl from -cli subpackage- add missing defattr\'s (thanks to Matthias Saou)
* Sat Jun 10 2006 Joe Orton 5.1.4-7- move Obsoletes for php-openssl to -common (#194501)- Provide: php-cgi from -cli subpackage
* Sat Jun 03 2006 Joe Orton 5.1.4-6- split out php-cli, php-common subpackages (#177821)- add php-pdo-abi version export (#193202)
* Thu May 25 2006 Radek Vokal 5.1.4-5.1- rebuilt for new libnetsnmp
* Fri May 19 2006 Joe Orton 5.1.4-5- provide mod_php (#187891)- provide php-cli (#192196)- use correct LDAP fix (#181518)- define _GNU_SOURCE in php_config.h and leave it defined- drop (circular) dependency on php-pear
* Tue May 09 2006 Joe Orton 5.1.4-3- update to 5.1.4
* Thu May 04 2006 Joe Orton 5.1.3-3- update to 5.1.3
* Wed Mar 01 2006 Joe Orton 5.1.2-5- provide php-api (#183227)- add provides for all builtin modules (Tim Jackson, #173804)- own %{_libdir}/php/pear for PEAR packages (per #176733)- add obsoletes to allow upgrade from FE4 PDO packages (#181863)
* Sat Feb 11 2006 Jesse Keating - 5.1.2-4.3- bump again for double-long bug on ppc(64)
* Wed Feb 08 2006 Jesse Keating - 5.1.2-4.1- rebuilt for new gcc4.1 snapshot and glibc changes
* Wed Feb 01 2006 Joe Orton 5.1.2-4- rebuild for new libc-client soname
* Tue Jan 17 2006 Joe Orton 5.1.2-3- only build xmlreader and xmlwriter shared (#177810)
* Sat Jan 14 2006 Joe Orton 5.1.2-2- update to 5.1.2
* Fri Jan 06 2006 Joe Orton 5.1.1-8- rebuild again
* Tue Jan 03 2006 Joe Orton 5.1.1-7- rebuild for new net-snmp
* Tue Dec 13 2005 Joe Orton 5.1.1-6- enable short_open_tag in default php.ini again (#175381)
* Sat Dec 10 2005 Jesse Keating - rebuilt
* Fri Dec 09 2005 Joe Orton 5.1.1-5- require net-snmp for php-snmp (#174800)
* Mon Dec 05 2005 Joe Orton 5.1.1-4- add /usr/share/pear back to hard-coded include_path (#174885)
* Sat Dec 03 2005 Joe Orton 5.1.1-3- rebuild for httpd 2.2
* Tue Nov 29 2005 Joe Orton 5.1.1-2- update to 5.1.1- remove pear subpackage- enable pdo extensions (php-pdo subpackage)- remove non-standard conditional module builds- enable xmlreader extension
* Fri Nov 11 2005 Tomas Mraz 5.0.5-6- rebuilt against new openssl
* Tue Nov 08 2005 Joe Orton 5.0.5-5- pear: update to XML_RPC 1.4.4, XML_Parser 1.2.7, Mail 1.1.9 (#172528)
* Wed Nov 02 2005 Joe Orton 5.0.5-4- rebuild for new libnetsnmp
* Thu Sep 15 2005 Joe Orton 5.0.5-3- update to 5.0.5- add fix for upstream #34435- devel: require autoconf, automake (#159283)- pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1- fix imagettftext et al (upstream, #161001)
* Fri Jun 17 2005 Joe Orton 5.0.4-11- ldap: restore ldap_start_tls() function
* Sat May 07 2005 Joe Orton 5.0.4-10- disable RPATHs in shared extensions (#156974)
* Wed May 04 2005 Joe Orton 5.0.4-9- build simplexml_import_dom even with shared dom (#156434)- prevent truncation of copied files to ~2Mb (#155916)- install /usr/bin/php from CLI build alongside CGI- enable sysvmsg extension (#142988)
* Tue Apr 26 2005 Joe Orton 5.0.4-8- prevent build of builtin dba as well as shared extension
* Thu Apr 14 2005 Joe Orton 5.0.4-7- split out dba and bcmath extensions into subpackages- BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)- pear: update to DB-1.7.6- enable FastCGI support in /usr/bin/php-cgi (#149596)
* Thu Apr 14 2005 Joe Orton 5.0.4-6- build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi, built with the CGI SAPI (thanks to Edward Rudd, #137704)- add php(1) man page for CLI- fix more test cases to use -n when invoking php
* Thu Apr 14 2005 Joe Orton 5.0.4-5- rebuild for new libpq soname
* Wed Apr 13 2005 Joe Orton 5.0.4-4- bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP- snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)- mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)
* Tue Apr 12 2005 Joe Orton 5.0.4-3- build shared objects as PIC (#154195)
* Tue Apr 05 2005 Joe Orton 5.0.4-2- fix PEAR installation and bundle PEAR DB-1.7.5 package
* Sat Apr 02 2005 Joe Orton 5.0.4-1- update to 5.0.4 (#153068)- add .phps AddType to php.conf (#152973)- better gcc4 fix for libxmlrpc
* Thu Mar 31 2005 Joe Orton 5.0.3-5- BuildRequire mysql-devel >= 4.1- don\'t mark php.ini as noreplace to make upgrades work (#152171)- fix subpackage descriptions (#152628)- fix memset(,,0) in Zend (thanks to Dave Jones)- fix various compiler warnings in Zend
* Fri Mar 25 2005 Joe Orton 5.0.3-4- package mysqli extension in php-mysql- really enable pcntl (#142903)- don\'t build with --enable-safe-mode (#148969)- use \"Instant Client\" libraries for oci8 module (Kai Bolay, #149873)
* Sat Feb 19 2005 Joe Orton 5.0.3-3- fix build with GCC 4
* Thu Feb 10 2005 Joe Orton 5.0.3-2- install the ext/gd headers (#145891)- enable pcntl extension in /usr/bin/php (#142903)- add libmbfl array arithmetic fix (dcb314AATThotmail.com, #143795)- add BuildRequire for recent pcre-devel (#147448)
* Thu Jan 13 2005 Joe Orton 5.0.3-1- update to 5.0.3 (thanks to Robert Scheck et al, #143101)- enable xsl extension (#142174)- package both the xsl and dom extensions in php-xml- enable soap extension, shared (php-soap package) (#142901)- add patches from upstream 5.0 branch:
* Zend_strtod.c compile fixes
* correct php_sprintf return value usage
* Tue Nov 23 2004 Joe Orton 5.0.2-8- update for db4-4.3 (Robert Scheck, #140167)- build against mysql-devel- run tests in %check
* Thu Nov 11 2004 Joe Orton 5.0.2-7- truncate changelog at 4.3.1-1- merge from 4.3.x package: - enable mime_magic extension and Require: file (#130276)
* Tue Nov 09 2004 Joe Orton 5.0.2-6- fix dom/sqlite enable/without confusion
* Tue Nov 09 2004 Joe Orton 5.0.2-5- fix phpize installation for lib64 platforms- add fix for segfault in variable parsing introduced in 5.0.2
* Tue Nov 09 2004 Joe Orton 5.0.2-4- update to 5.0.2 (#127980)- build against mysqlclient10-devel- use new RTLD_DEEPBIND to load extension modules- drop explicit requirement for elfutils-devel- use AddHandler in default conf.d/php.conf (#135664)- \"fix\" round() fudging for recent gcc on x86- disable sqlite pending audit of warnings and subpackage split
* Sat Sep 18 2004 Joe Orton 5.0.1-4- don\'t build dom extension into 2.0 SAPI
* Sat Sep 18 2004 Joe Orton 5.0.1-3- ExclusiveArch: x86 ppc x86_64 for the moment
* Sat Sep 18 2004 Joe Orton 5.0.1-2- fix default extension_dir and conf.d/php.conf
* Fri Sep 10 2004 Joe Orton 5.0.1-1- update to 5.0.1- only build shared modules once- put dom extension in php-dom subpackage again- move extension modules into %{_libdir}/php/modules- don\'t use --with-regex=system, it\'s ignored for the apache
* SAPIs
* Thu Aug 12 2004 Tom Callaway - Merge in some spec file changes from Jeff Stern (jasternAATTuci.edu)
* Tue Aug 10 2004 Tom Callaway - bump to 5.0.0- add patch to prevent clobbering struct re_registers from regex.h- remove domxml references, replaced with dom now built-in- fix php.ini to refer to php5 not php4