Logoj0ke.net Open Build Service > Projects > internetx:php7 > php-7.0.10 > php7.changes
Sign Up | Log In

File php7.changes of Package php-7.0.10

 
1
-------------------------------------------------------------------
2
Tue Aug 23 13:59:43 UTC 2016 - cs@linux-administrator.com
3
4
- update to release 7.0.10
5
6
-------------------------------------------------------------------
7
Thu Jul 28 06:15:29 UTC 2016 - cs@linux-administrator.com
8
9
- update to release 7.0.9
10
11
-------------------------------------------------------------------
12
Thu Jul 28 06:13:40 UTC 2016 - cs@linux-administrator.com
13
14
- update to release 7.0.8
15
16
-------------------------------------------------------------------
17
Mon May 30 09:43:09 UTC 2016 - cs@linux-administrator.com
18
19
- update to release 7.0.7
20
21
-------------------------------------------------------------------
22
Tue May  3 09:36:17 UTC 2016 - cs@linux-administrator.com
23
24
- update to release 7.0.6
25
26
-------------------------------------------------------------------
27
Mon Apr 18 07:51:59 UTC 2016 - cs@linux-administrator.com
28
29
- update to release 7.0.5
30
31
-------------------------------------------------------------------
32
Sun Mar  6 20:16:46 UTC 2016 - cs@linux-administrator.com
33
34
- update to release 7.0.4
35
36
-------------------------------------------------------------------
37
Thu Feb  4 18:13:28 UTC 2016 - cs@linux-administrator.com
38
39
- update to release 7.0.3
40
41
-------------------------------------------------------------------
42
Fri Jan  8 14:07:28 UTC 2016 - pgajdos@suse.com
43
44
- update to 7.0.2: 31 reported bugs has been fixed, including 
45
  6 security related issues.
46
47
-------------------------------------------------------------------
48
Mon Dec 21 03:09:27 UTC 2015 - jimmy@boombatower.com
49
50
- update to 7.0.1
51
52
-------------------------------------------------------------------
53
Mon Dec 14 13:04:35 UTC 2015 - pgajdos@suse.com
54
55
- php5-pear-Archive_Tar provides 1.4.0
56
- install .depdb and .depdblock files along metadata
57
  * php5-depdb-path.patch
58
- versioned provides in subpackages
59
60
-------------------------------------------------------------------
61
Mon Dec 14 01:00:31 UTC 2015 - jimmy@boombatower.com
62
63
- Provide obsoletes for sub-packages to improve upgrade process.
64
65
-------------------------------------------------------------------
66
Wed Dec  9 09:26:50 UTC 2015 - jimmy@boombatower.com
67
68
- Obsolete php5 since php7 conflicts and should replace.
69
70
-------------------------------------------------------------------
71
Mon Dec  7 09:11:59 UTC 2015 - pgajdos@suse.com
72
73
- marcello at ceschia.de: fix path php-fpm.conf
74
75
-------------------------------------------------------------------
76
Mon Nov 23 09:57:50 UTC 2015 - pgajdos@suse.com
77
78
- set pear's metadata dir to %{peardir}
79
80
-------------------------------------------------------------------
81
Mon Nov 16 13:37:51 UTC 2015 - aj@ajaissle.de
82
83
- Spec cleanup
84
  * Split Archive_Tar from -pear sub packge to allow updating this
85
    part via rpm
86
  * Added "Provides: php-firebird" to -firebird sub package
87
  * Added "Provides: mod_php_any" to server api module packages
88
    -fastcgi and -fpm
89
90
-------------------------------------------------------------------
91
Mon Nov 16 09:05:15 UTC 2015 - pgajdos@suse.com
92
93
- test mod_php with %apache_test_module_curl
94
- restart apache during mod_php upgrade
95
96
-------------------------------------------------------------------
97
Tue Sep  8 10:52:00 UTC 2015 - pgajdos@suse.com
98
99
- add php5-fix_net-snmp_disable_MD5.patch [bnc#944302]
100
101
-------------------------------------------------------------------
102
Fri Sep  4 17:22:04 UTC 2015 - pgajdos@suse.com
103
104
- fixed segfault in odbc extension when result set is containing
105
  NULL (php bugs #52554, #53007) [bnc#935074] (internal)
106
  + php7-odbc-cmp-int-cast.patch
107
108
-------------------------------------------------------------------
109
Tue Jul 14 09:13:52 UTC 2015 - pgajdos@suse.com
110
111
- updated to 7.0.0
112
  * see NEWS for changes
113
  * see UPGRADING for 5.6.x -> 7.0.x transition
114
- removed unneded or not upstreamed patches for long time:
115
  * php5-cloexec.patch
116
  * php5-missing-extdeps.patch
117
  * php5-format-string-issues.patch
118
  * php5-per-mod-log.patch
119
  * php5-apache24-updates.patch
120
  * php5-crypto-checks.patch
121
  * php5-systzdata-r12.patch (new: php7-systzdata-v13.patch)
122
123
-------------------------------------------------------------------
124
Mon Jul 13 17:40:28 UTC 2015 - pgajdos@suse.com
125
126
- updated to 5.6.11: Five security-related issues in PHP were fixed 
127
  in this release, including CVE-2015-3152.
128
129
-------------------------------------------------------------------
130
Thu Jun 25 04:01:44 UTC 2015 - crrodriguez@opensuse.org
131
132
- php5-systemd-unit.patch: set Killmode=mixed in order 
133
  to ensure fpm and children forked by script can terminate
134
  cleanly.
135
136
-------------------------------------------------------------------
137
Wed Jun 24 07:32:15 UTC 2015 - pgajdos@suse.com
138
139
-  mod_php5.so executable
140
141
-------------------------------------------------------------------
142
Thu Jun 18 09:49:11 UTC 2015 - pgajdos@suse.com
143
144
- use apache-rpm-macros
145
146
-------------------------------------------------------------------
147
Thu Jun 18 09:47:53 UTC 2015 - pgajdos@suse.com
148
149
- updated to 5.6.10: Several bugs have been fixed as well as several 
150
  security issues into some bundled libraries (CVE-2015-3414, 
151
  CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326).
152
153
-------------------------------------------------------------------
154
Fri Jun  5 23:59:37 UTC 2015 - mrueckert@suse.de
155
156
- enable apparmor support: new BR libapparmor-devel
157
158
-------------------------------------------------------------------
159
Mon May 18 08:11:14 UTC 2015 - pgajdos@suse.com
160
161
- update to 5.6.9: Several bugs have been fixed.
162
- systzdata patch updated to r12
163
  - php5-systzdata-r10.patch
164
  + php5-systzdata-r12.patch
165
166
-------------------------------------------------------------------
167
Fri Apr 24 06:17:51 UTC 2015 - pgajdos@suse.com
168
169
- update to 5.6.8: Several bugs have been fixed some of them beeing 
170
  security related, like CVE-2015-1351 and CVE-2015-1352.
171
- refreshed php5-crypto-checks.patch
172
173
-------------------------------------------------------------------
174
Mon Apr 20 12:03:05 UTC 2015 - pgajdos@suse.com
175
176
- configure php-fpm with --localstatedir=/var [bnc#927147]
177
178
-------------------------------------------------------------------
179
Wed Apr  8 06:15:10 UTC 2015 - pgajdos@suse.com
180
181
- systzdata patch updated to r10
182
  - php5-systzdata-v7.patch
183
  + php5-systzdata-r10.patch
184
185
-------------------------------------------------------------------
186
Thu Apr  2 12:58:40 UTC 2015 - pgajdos@suse.com
187
188
- build against system gd and libzip only for 13.2 and above
189
190
-------------------------------------------------------------------
191
Tue Mar 24 13:26:49 UTC 2015 - pgajdos@suse.com
192
193
- update to 5.6.7: Several bugs have been fixed as well as 
194
  CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331.
195
196
-------------------------------------------------------------------
197
Tue Mar 24 13:21:19 UTC 2015 - pgajdos@suse.com
198
199
- build against system gd [bnc#923946]
200
201
-------------------------------------------------------------------
202
Fri Mar 20 08:18:12 UTC 2015 - pgajdos@suse.com
203
204
- build against system libzip [bnc#922894]
205
206
-------------------------------------------------------------------
207
Mon Feb 23 11:36:32 UTC 2015 - pgajdos@suse.com
208
209
- update to 5.6.6: fixes several bugs and addresses CVE-2015-0235 
210
  and CVE-2015-0273.
211
212
-------------------------------------------------------------------
213
Mon Feb  9 08:19:06 UTC 2015 - pgajdos@suse.com
214
215
- added README.default_socket_timeout [bnc#907519]
216
217
-------------------------------------------------------------------
218
Tue Feb  3 08:30:28 UTC 2015 - pgajdos@suse.com
219
220
- fix sle_11_sp3 build
221
222
-------------------------------------------------------------------
223
Mon Jan 26 08:52:12 UTC 2015 - pgajdos@suse.com
224
225
- update to 5.6.5: This release fixes several bugs as well as 
226
  CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232.
227
- removed patches:
228
  * php-CVE-2014-9426.patch
229
  * php-CVE-2014-9427.patch
230
  * php-CVE-2015-0231.patch
231
232
-------------------------------------------------------------------
233
Wed Jan 21 11:14:46 UTC 2015 - pgajdos@suse.com
234
235
- added php-CVE-2015-0231.patch [bnc#910659]
236
237
-------------------------------------------------------------------
238
Mon Jan  5 14:34:23 UTC 2015 - pgajdos@suse.com
239
240
- added php-CVE-2014-9426.patch [bnc#911663]
241
- added php-CVE-2014-9427.patch [bnc#911664]
242
243
-------------------------------------------------------------------
244
Fri Dec 19 08:00:32 UTC 2014 - pgajdos@suse.com
245
246
- update to 5.6.4: This release fixes several bugs and one CVE 
247
  related to unserialization.
248
249
-------------------------------------------------------------------
250
Tue Nov 18 14:28:08 UTC 2014 - pgajdos@suse.com
251
252
- update to 5.6.3: This release fixes several bugs and one CVE 
253
  in the fileinfo extension.
254
255
-------------------------------------------------------------------
256
Mon Oct 27 07:30:03 UTC 2014 - pgajdos@suse.com
257
258
- update to 5.6.2: Four security-related bugs were fixed in this 
259
  release, including fixes for CVE-2014-3668, CVE-2014-3669 and 
260
  CVE-2014-3670.
261
262
-------------------------------------------------------------------
263
Tue Oct 14 08:07:31 UTC 2014 - pgajdos@suse.com
264
265
- upgraded to 5.6.1:
266
  * Several bugs were fixed in this release (including CVE-2014-3622).
267
268
-------------------------------------------------------------------
269
Thu Oct  2 20:27:56 UTC 2014 - crrodriguez@opensuse.org
270
271
- php5-crypto-checks.patch: Fix broken libcrypto checks 
272
  DSA_get_default_method is in -lcrypto not -lssl
273
- DO not use xorg-x11-devel, just pkgconfig(xpm) and xft
274
- Support WEBP in the gd extension by buildrequiring libvpx-devel
275
276
-------------------------------------------------------------------
277
Fri Aug 29 09:32:42 UTC 2014 - pgajdos@suse.com
278
279
- fix CVE-2014-5459 [bnc#893849]
280
281
-------------------------------------------------------------------
282
Fri Aug 29 06:06:20 UTC 2014 - pgajdos@suse.com
283
284
- actually, there's no point to install pear from other source
285
  than from php tarball
286
  * remove source install-pear-nozlib.phar
287
288
-------------------------------------------------------------------
289
Thu Aug 28 14:57:42 UTC 2014 - pgajdos@suse.com
290
291
- updated PEAR to 1.9.5, bugfix release
292
  see http://pear.php.net/package/PEAR/download
293
  for details
294
295
-------------------------------------------------------------------
296
Thu Aug 28 12:49:25 UTC 2014 - pgajdos@suse.com
297
298
- updated to 5.6.0:
299
  * Most improvements in PHP 5.6.x have no impact on existing code. 
300
    There are a few incompatibilities and new features that should 
301
    be considered:
302
    http://php.net/manual/en/migration56.php
303
- removed patches:
304
  * php5-big-file-upload.patch (upstreamed)
305
  * php5-suhosin-php55.patch (upstreamed)
306
- modified patches:
307
  * php5-openssl.patch (refreshed)
308
309
-------------------------------------------------------------------
310
Tue Aug 26 06:50:40 UTC 2014 - pgajdos@suse.com
311
312
- This release fixes several bugs against PHP 5.5.15 and resolves 
313
  CVE-2014-3538, CVE-2014-3587, CVE-2014-2497, CVE-2014-5120 and 
314
  CVE-2014-3597. 
315
- removed patches:
316
  * php-CVE-2014-2497.patch
317
318
-------------------------------------------------------------------
319
Tue Jul 29 08:04:01 UTC 2014 - pgajdos@suse.com
320
321
- updated to 5.5.15:
322
  This release fixes several bugs against PHP 5.5.14. 
323
  The list of changes is recorded in the ChangeLog or
324
  http://php.net/ChangeLog-5.php#5.5.15.
325
- removed patches:
326
  * php-CVE-2014-4670.patch (upstreamed)
327
  * php-CVE-2014-4698.patch (upstreamed)
328
-------------------------------------------------------------------
329
Thu Jul 17 14:32:29 UTC 2014 - pgajdos@suse.com
330
331
- security update:
332
  * php-CVE-2014-4670.patch [bnc#886059]
333
  * php-CVE-2014-4698.patch [bnc#886060]
334
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
335
336
-------------------------------------------------------------------
337
Tue Jul  1 06:58:06 UTC 2014 - pgajdos@suse.com
338
339
- updated to 5.5.14: This release fixes several bugs against
340
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
341
  half of them concerning the FileInfo extension.
342
- removed php-5.5.13-CVE-2014-4049.patch (upstreamed)
343
344
-------------------------------------------------------------------
345
Tue Jun 17 15:56:53 UTC 2014 - pgajdos@suse.com
346
347
- security update
348
  * php-5.5.13-CVE-2014-4049.patch [bnc#882992]
349
350
-------------------------------------------------------------------
351
Tue Jun 17 07:17:37 UTC 2014 - pgajdos@suse.com
352
353
- php5-5.5.10-CVE-2014-2497.patch renamed to
354
  php-5.5.10-CVE-2014-2497.patch to be consistent with other 
355
  product php patches names
356
357
-------------------------------------------------------------------
358
Tue Jun  3 12:03:33 UTC 2014 - pgajdos@suse.com
359
360
- do not package latest_test_results.txt; instead, run build-test.sh
361
  twice: before and after source changes
362
363
-------------------------------------------------------------------
364
Mon Jun  2 09:37:59 UTC 2014 - pgajdos@suse.com
365
366
- updated to 5.5.13: This release fixes several bugs in PHP 5.5.12, 
367
  and addresses two CVEs in Fileinfo (CVE-2014-0238 and CVE-2014-0237).
368
369
-------------------------------------------------------------------
370
Wed May  7 12:08:46 UTC 2014 - pgajdos@suse.com
371
372
- updated to 5.5.12: Fixed several bugs against PHP 5.5.11, 
373
  as well as CVE-2014-0185 regarding PHP-FPM.
374
- improved build-test.sh
375
376
-------------------------------------------------------------------
377
Wed Apr 30 12:07:22 UTC 2014 - pgajdos@suse.com
378
379
- build-test.sh: use relevant api for build; propagate build 
380
  parameters to osc
381
382
-------------------------------------------------------------------
383
Wed Apr 30 08:47:24 UTC 2014 - schwab@linux-m68k.org
384
385
- php5-gcc_builtins.patch: remove unused patch
386
387
-------------------------------------------------------------------
388
Tue Apr 29 09:34:56 UTC 2014 - pgajdos@suse.com
389
390
- add build-test.sh and latest_test_results.txt for testing 
391
  regressions in tests before and after update. Run
392
  
393
  sh build-test.sh 
394
395
  after changes. php will get built and test results will be
396
  compared with latest_test_results.txt and differences reported.
397
398
  mv latest_test_results.txt.new latest_test_results.txt
399
400
  if differences are acceptable.
401
402
-------------------------------------------------------------------
403
Wed Apr  9 06:29:41 UTC 2014 - pgajdos@suse.com
404
405
- updated to 5.5.11:
406
  * Several bugs were fixed in this release, some bundled libraries 
407
    updated and a security issue has been fixed : CVE-2013-7345.
408
409
-------------------------------------------------------------------
410
Fri Apr  4 12:20:16 UTC 2014 - pgajdos@suse.com
411
412
- fixed CVE-2014-2497 [bnc#868624]
413
414
-------------------------------------------------------------------
415
Mon Mar 17 12:11:34 UTC 2014 - pgajdos@suse.com
416
417
- updated to 5.5.10:
418
  * Several bugs were fixed in this release, including security 
419
    issues related to CVEs. CVE-2014-1943, CVE-2014-2270 and 
420
    CVE-2013-7327 have been addressed in this release.
421
422
-------------------------------------------------------------------
423
Tue Feb 11 00:21:52 UTC 2014 - adaugherity@tamu.edu
424
425
- Fix build on non-systemd distros (esp. SLES 11)
426
427
-------------------------------------------------------------------
428
Fri Feb  7 09:46:47 UTC 2014 - pgajdos@suse.com
429
430
- updated to 5.5.9:
431
  * This release fixes several bugs against PHP 5.5.8.
432
  * see NEWS or http://www.php.net/ChangeLog-5.php#5.5.9 for 
433
    details
434
- modified patches:
435
  * php5-no-build-date.patch (refreshed using quilt)
436
437
-------------------------------------------------------------------
438
Mon Jan 13 08:35:59 UTC 2014 - pgajdos@suse.com
439
440
- updated to 5.5.8: 
441
  * fixes CVE-2013-6712 and build against freetype2
442
  * see http://www.php.net/ChangeLog-5.php#5.5.8
443
    for more
444
  * removed CVE-2013-6712.patch
445
  * removed freetype2_include_dir.patch
446
447
-------------------------------------------------------------------
448
Fri Dec 20 12:03:41 UTC 2013 - hrvoje.senjan@gmail.com
449
450
- Added php5-freetype2_include_dir.patch: Fixes check of freetype2
451
  headers, as freetype2 2.5.1 changed the header location
452
453
-------------------------------------------------------------------
454
Wed Dec 18 11:35:27 UTC 2013 - pgajdos@suse.com
455
456
- updated to 5.5.7:
457
  * fixes some bugs against PHP 5.5.6 and it also includes a fix 
458
    for CVE-2013-6420 in OpenSSL extension
459
  -> removed CVE-2013-6420.patch
460
461
-------------------------------------------------------------------
462
Wed Dec 11 12:54:11 UTC 2013 - pgajdos@suse.com
463
464
- security update [bnc#854880]
465
  * added CVE-2013-6420.patch
466
467
-------------------------------------------------------------------
468
Tue Dec  3 12:24:28 UTC 2013 - pgajdos@suse.com
469
470
- security update [bnc#853045]
471
  * added CVE-2013-6712.patch
472
473
-------------------------------------------------------------------
474
Mon Nov 22 10:10:50 UTC 2013 - pgajdos@suse.com
475
476
- updated to 5.5.6:
477
  * fixes some bugs against PHP 5.5.5, and adds some performance
478
    improvements.
479
  * see http://www.php.net/ChangeLog-5.php#5.5.6 for details
480
481
-------------------------------------------------------------------
482
Mon Nov 22 10:10:49 UTC 2013 - pgajdos@suse.com
483
484
- updated to 5.5.5:
485
  * This release fixes about twenty bugs against PHP 5.5.4, some
486
    of them regarding the build system.
487
  * added sys_temp_dir ini directive
488
- removed custom-tmp-dir.patch (upstreamed)
489
490
-------------------------------------------------------------------
491
Mon Nov 22 10:10:48 UTC 2013 - pgajdos@suse.com
492
493
- updated to 5.5.4:
494
  * This release fixes several bugs against PHP 5.5.3.
495
- crypt-tests.patch partially upstreamed
496
- use zend_extension instead of extension directive in opcache.ini
497
  [bnc#840350]
498
499
-------------------------------------------------------------------
500
Mon Nov 22 10:10:47 UTC 2013 - pgajdos@suse.com
501
502
- updated to 5.5.3: These release fix a bug in the patch for
503
  CVE-2013-4248 in OpenSSL module and compile failure with ZTS enabled
504
  in PHP 5.4.
505
506
-------------------------------------------------------------------
507
Mon Nov 22 10:10:46 UTC 2013 - pgajdos@suse.com
508
509
- updated to 5.5.2:
510
  * About 20 bugs were fixed, including security issue in OpenSSL
511
    module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).
512
513
-------------------------------------------------------------------
514
Mon Nov 22 10:10:45 UTC 2013 - pgajdos@suse.com
515
516
- updated to 5.5.1
517
  * bugfixes incl. security fix in the XML parser
518
519
-------------------------------------------------------------------
520
Mon Nov 22 10:10:44 UTC 2013 - Ralf Lang <lang@b1-systems.de>
521
522
- replace php5-64-bit-post-large-files.patch with php5-big-file-upload.patch
523
  patch that uses def_t instead of signed long as suggested by upstream
524
525
-------------------------------------------------------------------
526
Mon Nov 22 10:10:43 UTC 2013 - pgajdos@suse.com
527
528
- updated to 5.5.0:
529
  * Added generators and coroutines.
530
  * Added the finally keyword.
531
  * Added a simplified password hashing API.
532
  * Added support for constant array/string dereferencing.
533
  * Added scalar class name resolution via ::class.
534
  * Added support for using empty() on the result of function
535
    calls and other expressions.
536
  * Added support for non-scalar Iterator keys in foreach.
537
  * Added support for list() constructs in foreach statements.
538
  * Added the Zend OPcache extension for opcode caching.
539
  * A lot more improvements and fixes.
540
  * PHP logo GUIDs have been removed.
541
  * Case insensitivity is no longer locale specific. All case
542
    insensitive matching for function, class and constant names
543
    is now performed in a locale independent manner according to
544
    ASCII rules.
545
- buildrequire cyrus-sasl-devel explicitely
546
- suhosin-php54.patch renamed to suhosin-php55.patch
547
548
-------------------------------------------------------------------
549
Mon Nov 18 10:10:43 UTC 2013 - pgajdos@suse.com
550
551
- update to 5.4.22:
552
  * About 10 bugs were fixed.
553
  * see http://www.php.net/ChangeLog-5.php#5.4.22 for details
554
555
-------------------------------------------------------------------
556
Wed Oct 30 07:56:07 UTC 2013 - pgajdos@suse.com
557
558
- updatedto 5.4.21:
559
  * About 10 bugs were fixed.
560
  * added custom-tmp-dir.patch by Per Jessen
561
562
-------------------------------------------------------------------
563
Sun Oct 13 21:24:58 UTC 2013 - crrodriguez@opensuse.org
564
565
- build with --with-fpm-systemd and install systemd unit 
566
- php5-systemd-unit.patch: tweak systemd unit for openSUSE requirements
567
- php5-openssl.patch: only openSSL_config() is really needed.
568
- Recommended for 13.1 and Factory
569
570
-------------------------------------------------------------------
571
Wed Sep 25 09:30:23 UTC 2013 - pgajdos@suse.com
572
573
- updated to 5.4.20:
574
  * About 30 bugs were fixed.
575
576
-------------------------------------------------------------------
577
Thu Sep  5 12:44:11 UTC 2013 - pgajdos@suse.com
578
579
- updated to 5.4.19:
580
  * These releases fix a bug in the patch for CVE-2013-4248 in 
581
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.
582
583
-------------------------------------------------------------------
584
Tue Aug 20 10:44:04 UTC 2013 - pgajdos@suse.com
585
586
- updated to 5.4.18:
587
  * About 30 bugs were fixed, including security issues CVE-2013-4113 
588
    and CVE-2013-4248.
589
590
-------------------------------------------------------------------
591
Thu Aug  1 21:28:15 UTC 2013 - crrodriguez@opensuse.org
592
593
- php5-per-mod-log.patch: It turns out that requesting per-module
594
 logging support in 2.4 will not do a thing if the expansion
595
 of APLOG_USE_MODULE is not visible to all files of the module
596
 so place it in the header instead.
597
598
-------------------------------------------------------------------
599
Wed Jul 31 01:21:24 UTC 2013 - crrodriguez@opensuse.org
600
601
- php5-per-mod-log.patch Support apache 2.4 per module logging 
602
- php5-apache24-updates.patch Use proper API in apache 2.4 
603
  to determine when the module has to be loaded.
604
  I made this patches at least a year ago, but for some reason
605
  they went out of my radar and were not applied to upstream
606
  Will be submitted again soon.
607
608
-------------------------------------------------------------------
609
Mon Jul 15 14:49:21 UTC 2013 - pgajdos@suse.com
610
611
- updated to 5.4.17:
612
    Core:
613
        Fixed bug #64988 (Class loading order affects E_STRICT warning).
614
        Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
615
        Fixed bug #64960 (Segfault in gc_zval_possible_root).
616
        Fixed bug #64936 (doc comments picked up from previous scanner run).
617
        Fixed bug #64934 (Apache2 TS crash with get_browser()).
618
        Fixed bug #64166 (quoted-printable-encode stream filter incorrectly 
619
                          discarding whitespace).
620
    DateTime:
621
        Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
622
    FPM:
623
        Fixed bug #64915 (error_log ignored when daemonize=0).
624
        Implemented FR #64764 (add support for FPM init.d script).
625
    PDO:
626
        Fixed bug #63176 (Segmentation fault when instantiate 2 persistent 
627
                          PDO to the same db server).
628
    PDO_DBlib:
629
        Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
630
        Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
631
        Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not 
632
                          executed statement crashes).
633
    PDO_firebird:
634
        Fixed bug #64037 (Firebird return wrong value for numeric field).
635
        Fixed bug #62024 (Cannot insert second row with null using 
636
                          parametrized query).
637
    PDO_mysql:
638
        Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT, 
639
                          TINYINT and YEAR).
640
    PDO_pgsql:
641
        Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
642
    pgsql:
643
        Fixed bug #64609 (pg_convert enum type support).
644
    Readline:
645
        Implement FR #55694 (Expose additional readline variable to prevent 
646
                             default filename completion).
647
    SPL:
648
        Fixed bug #64997 (Segfault while using RecursiveIteratorIterator 
649
                          on 64-bits systems).
650
651
-------------------------------------------------------------------
652
Tue Jun 18 10:32:25 UTC 2013 - jengelh@inai.de
653
654
- Explicitly specify cyrus-sasl build dependency
655
656
-------------------------------------------------------------------
657
Thu Jun 13 09:38:54 UTC 2013 - pgajdos@suse.com
658
659
- updated to 5.4.16
660
- Core:
661
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
662
    CVE 2013-2110). (Stas)
663
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
664
    TS build). (Anatol)
665
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
666
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
667
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
668
    (Stas, reported by Juha Kylmänen)
669
670
- Calendar:
671
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
672
673
- Fileinfo:
674
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
675
676
- FPM:
677
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
678
  . Fixed some possible memory or resource leaks and possible null dereference
679
    detected by code coverity scan. (Remi)
680
  . Log a warning when a syscall fails. (Remi)
681
  . Add --with-fpm-systemd option to report health to systemd, and
682
    systemd_interval option to configure this. The service can now use
683
    Type=notify in the systemd unit file. (Remi)
684
685
- MySQLi
686
 . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
687
    pointer has closed). (Laruence)
688
689
- Phar
690
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
691
    with non std tmp dir). (Pierre)
692
693
- SNMP:
694
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
695
    (Boris Lytochkin)
696
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
697
698
- Streams:
699
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
700
    on Windows x64). (Anatol)
701
702
- Zend Engine:
703
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
704
    overridden). (Anatol)
705
706
-------------------------------------------------------------------
707
Fri May 10 06:58:11 UTC 2013 - pgajdos@suse.com
708
709
- updated to 5.4.15:
710
    Core:
711
        Fixed bug #64578 (debug_backtrace in set_error_handler 
712
           corrupts zend heap: segfault).
713
        Fixed bug #64458 (dns_get_record result with string of 
714
           length -1).
715
        Fixed bug #64433 (follow_location parameter of context 
716
           is ignored for most response codes).
717
        Fixed bug #47675 (fd leak on Solaris).
718
        Fixed bug #64577 (fd leak on Solaris).
719
    Fileinfo:
720
        Upgraded libmagic to 5.14.
721
    Streams:
722
        Fixed Windows x64 version of stream_socket_pair() and 
723
           improved error handling.
724
    Zip:
725
        Fixed bug #64342 (ZipArchive::addFile() has to check 
726
           for file existence).
727
728
-------------------------------------------------------------------
729
Fri Apr 26 19:45:03 UTC 2013 - adaugherity@tamu.edu
730
731
- Conflict with php53 packages so zypper doesn't suggest installing a
732
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).
733
734
-------------------------------------------------------------------
735
Fri Apr 26 19:20:28 UTC 2013 - adaugherity@tamu.edu
736
737
- Fix build on SLES 11 (no firebird) and openSUSE <= 12.1 (no separate
738
  libfbclient2-devel pkg).
739
740
-------------------------------------------------------------------
741
Mon Apr 22 13:33:25 UTC 2013 - pgajdos@suse.com
742
743
- use current install-pear-nozlib.phar from
744
  http://pear.php.net/install-pear-nozlib.phar
745
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
746
  see explanation in the spec
747
748
-------------------------------------------------------------------
749
Wed Apr 17 17:35:33 UTC 2013 - slavb18@gmail.com
750
751
- add php5-firebird providing php5-interbase and php5-pdo_firebird 
752
753
-------------------------------------------------------------------
754
Mon Apr 15 09:38:23 UTC 2013 - pgajdos@suse.com
755
756
- updated to 5.4.14:
757
    Core:
758
        Fixed bug #64529 (Ran out of opcode space).
759
        Fixed bug #64515 (Memoryleak when using the same variablename 
760
                          two times in function declaration).
761
        Fixed bug #64432 (more empty delimiter warning in strX methods).
762
        Fixed bug #64417 (ArrayAccess::&offsetGet() in a trait causes 
763
                          fatal error).
764
        Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
765
        Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10 
766
                          or 5.4.11).
767
        Fixed bug #63976 (Parent class incorrectly using child constant 
768
                          in class property).
769
        Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not 
770
                          handle exceptions properly).
771
        Fixed bug #62343 (Show class_alias In get_declared_classes()).
772
    PCRE:
773
        Merged PCRE 8.32.
774
    SNMP:
775
        Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly). 
776
    Zip:
777
        Fixed bug #64452 (Zip crash intermittently). (Anatol) 
778
779
-------------------------------------------------------------------
780
Mon Apr 15 09:22:26 UTC 2013 - pgajdos@suse.com
781
782
- libc-client.so needs -lssl
783
784
-------------------------------------------------------------------
785
Fri Apr  5 13:34:28 UTC 2013 - pgajdos@suse.com
786
787
- fixed 'http limits uploads to 2GB' [bnc#812800], see
788
  https://bugs.php.net/bug.php?id=44522
789
  * 64bit-post-large-files.patch
790
791
-------------------------------------------------------------------
792
Thu Mar 21 11:58:40 UTC 2013 - pgajdos@suse.com
793
794
- updated to 5.4.13:
795
    Core:
796
        Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
797
        Implemented FR #64175 (Added HTTP codes as of RFC 6585).
798
        Fixed bug #64142 (dval to lval different behavior on ppc64).
799
        Fixed bug #64070 (Inheritance with Traits failed with error).
800
    CLI server:
801
        Fixed bug #64128 (buit-in web server is broken on ppc64).
802
    Mbstring:
803
        mb_split() can now handle empty matches like preg_split() does.
804
    OpenSSL:
805
        Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
806
    PDO_mysql:
807
        Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
808
    Phar:
809
        Fixed timestamp update on Phar contents modification.
810
    SOAP
811
        Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
812
        Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
813
    SPL:
814
        Fixed bug #64264 (SPLFixedArray toArray problem).
815
        Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
816
        Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
817
        Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
818
    SNMP:
819
        Fixed bug #64124 (IPv6 malformed).
820
821
-------------------------------------------------------------------
822
Thu Mar 21 09:27:28 UTC 2013 - pgajdos@suse.com
823
824
- updated to 5.4.12:
825
  * dropped sqlite.so (no longer shipped with 5.4)
826
  * dropped t1lib support
827
  * dropped %{suse_version} 10.x support
828
  * see /usr/share/doc/packages/php5/UPGRADING or
829
    http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/UPGRADING
830
    for details
831
  * source changes:
832
    D    php-5.2.9-BNC-457056.patch -- renamed to php5-BNC-457056.patch
833
    D    php-5.3.0-bnc513080.patch -- there's no relevant code in exif.c
834
    D    php-5.3.1-systzdata-v7.patch -- renamed to php5-systzdata-v7.patch
835
    D    php-5.3.2-aconf26x.patch -- dropped, it is not needed yet
836
    D    php-5.3.2-ini.patch -- renamed to php5-ini.patch
837
    D    php-5.3.2-no-build-date.patch -- renamed to php5-no-build-date.patch
838
    D    php-5.3.22.tar.bz2 -- old tarball
839
    D    php-5.3.4-format-string-issues.patch -- renamed to php5-format-string-issues.patch
840
    D    php-5.3.4-pts.patch -- renamed to php5-pts.patch
841
    D    php-5.3.6-gcc_builtins.patch -- renamed to php5-gcc_builtins.patch
842
    D    php-5.3.6-ini-date.timezone.patch -- part of php5-ini.patch
843
    D    php-5.3.8-CVE-2011-4153.patch -- fixed in 5.4 branch
844
    D    php-5.3.8-crypt-tests.patch -- renamed to php5-crypt-tests.patch
845
    D    php-5.3.8-no-reentrant-crypt.patch -- renamed to php5-no-reentrant-crypt.patch
846
    A    php-5.4.13.tar.bz2 -- new version tarball
847
    D    php-cloexec.patch -- renamed to php5-cloexec.patch
848
    M    php-suse-addons.tar.bz2 -- content of tar balls are actualy equal
849
    A    php5-BNC-457056.patch -- renamed from php-5.2.9-BNC-457056.patch, not rebased
850
    A    php5-cloexec.patch -- renamed from php-cloexec.patch, rebased
851
    A    php5-sytzdata-v7.patch -- renamed from sytzdata-v7.pach, not rebased
852
    A    php-format-string-issues.patch -- renamed from php5-5.3.4-format-string-issues.patch, not rebased
853
    A    php5-crypt-tests.patch -- renamed from php-5.3.8-crypt-tests.patch, not rebased
854
    A    php5-gcc_builtins.patch -- renamed from php-5.3.6-gcc_builtins.patch, not rebased
855
    A    php5-ini.patch -- renamed from php-5.3.2-ini.patch, rebased
856
    A    php5-mbstring-missing-return.patch -- new patch, missing return
857
    M    php5-missing-extdeps.patch -- rebased
858
    A    php5-no-build-date.patch -- renamed from php-5.3.2-no-build-date.patch, rebased
859
    A    php5-no-reentrant-crypt.patch -- renamed from php-5.3.8-no-reentrant-crypt.patch, not rebased
860
    M    php5-openssl.patch -- rebased
861
    M    php5-phpize.patch -- rebased
862
    A    php5-pts.patch -- renamed from php-5.3.4-pts.patch, not rebased
863
    A    php5-suhosin-php54.patch -- patch on top of suhosin-0.9.33.tgz to work with php 5.4
864
    M    php5.changes -- this change log
865
    M    php5.spec -- new version, etc
866
    D    suhosin-patch-5.3.3-0.9.10.patch.gz -- dropped, seems not be used for some time
867
868
-------------------------------------------------------------------
869
Mon Feb 25 10:13:28 UTC 2013 - pgajdos@suse.com
870
871
- updated to 5.3.22:
872
  . Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes)
873
  . Fixed bug #63899 (Use after scope error in zend_compile). (Laruence)
874
  . Fixed bug #63943 (Bad warning text from strpos() on empty needle).
875
    (Laruence)
876
  . Fixed bug #55397 (comparsion of incomplete DateTime causes SIGSEGV).
877
    (Laruence, Derick)
878
  . Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)
879
  . Added check that soap.wsdl_cache_dir conforms to open_basedir
880
    (CVE-2013-1635). (Dmitry)
881
  . Disabled external entities loading (CVE-2013-1643). (Dmitry)
882
  . Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended). (Nikita Popov)
883
884
-------------------------------------------------------------------
885
Thu Feb  7 12:05:01 UTC 2013 - pgajdos@suse.com
886
887
- updated to 5.3.21:
888
  * Fixed bug #63762 (Sigsegv when Exception::$trace is changed by user).
889
  * Fixed bug (segfault due to libcurl connection caching).
890
  * Fixed bug #63795 (CURL >= 7.28.0 no longer support value 1 for CURLOPT_SSL_VERIFYHOST).
891
  etc. see NEWS for details
892
893
-------------------------------------------------------------------
894
Thu Oct 18 10:18:41 UTC 2012 - pgajdos@suse.com
895
896
- fix CVE-2011-4153 CVE-2011-4153 [bnc#741859]
897
898
-------------------------------------------------------------------
899
Tue Oct 16 12:37:36 UTC 2012 - coolo@suse.com
900
901
- add explicit buildrequire on libbz2-devel
902
  (having to patch old .changes file to avoid "double entry")
903
904
-------------------------------------------------------------------
905
Thu Oct 11 09:16:27 UTC 2012 - pgajdos@suse.com
906
907
- updated to 5.3.17:
908
  * Fixed bug (segfault while build with zts and GOTO vm-kind)
909
  * Fixed bug #62844 (parse_url() does not recognize //
910
  * etc. see NEWS for details
911
912
-------------------------------------------------------------------
913
Mon Aug 27 14:47:48 UTC 2012 - pgajdos@suse.com
914
915
- use FilesMatch with 'SetHandler' rather than 'AddHandler'
916
  [bnc#775852]
917
918
-------------------------------------------------------------------
919
Mon Aug 27 14:44:27 UTC 2012 - pgajdos@suse.com
920
921
- updated to 5.3.16:
922
  * fixes over 20 bugs, see NEWS for more details
923
924
-------------------------------------------------------------------
925
Wed Jul 25 12:48:08 UTC 2012 - pgajdos@suse.com
926
927
- updated to 5.3.15:
928
  * fixes over 30 bugs and includes a fix for a security related 
929
    overflow issue in the stream implementation (CVE-2012-2688)
930
    [bnc#772582] and open_basedir bypass, CVE-2012-3365 [bnc#772580]
931
932
-------------------------------------------------------------------
933
Mon Jun 18 17:08:57 UTC 2012 - pgajdos@suse.com
934
935
- updated to 5.3.14: 
936
  * bug-fix release, see NEWS for details
937
938
-------------------------------------------------------------------
939
Fri May 25 15:10:26 UTC 2012 - pgajdos@suse.com
940
941
- updated to 5.3.13: various security fixes, 
942
  CVE-2012-1823, CVE-2012-2311, CVE-2012-2335, CVE-2012-2336
943
  * removed php-5.3.10-pcre_fullinfo.patch 
944
  * refreshed php-5.3.2-aconf26x.patch
945
946
-------------------------------------------------------------------
947
Thu Mar  8 19:40:22 UTC 2012 - coolo@suse.com
948
949
- fix license to spdx.org format
950
951
-------------------------------------------------------------------
952
Tue Feb 28 09:08:30 UTC 2012 - pgajdos@suse.com
953
954
- fixed build with new pcre (php bug 60986) 
955
956
-------------------------------------------------------------------
957
Sat Feb  4 16:35:07 UTC 2012 - crrodriguez@opensuse.org
958
959
- Build with -fpie 
960
961
-------------------------------------------------------------------
962
Thu Feb  2 21:31:00 UTC 2012 - crrodriguez@opensuse.org
963
964
- PHP 5.3.10, fixes CVE-2012-0830.
965
966
-------------------------------------------------------------------
967
Sat Jan 28 18:52:35 UTC 2012 - crrodriguez@opensuse.org
968
969
- remove unapplied patches 
970
971
-------------------------------------------------------------------
972
Wed Jan 18 15:17:02 UTC 2012 - pgajdos@suse.com
973
974
- buildrequire libjpeg-devel
975
976
-------------------------------------------------------------------
977
Tue Jan 17 08:35:44 UTC 2012 - pgajdos@suse.com
978
979
- remove apache module conflict with apache2-worker [bnc#728671]
980
- amended README.SUSE instead
981
982
-------------------------------------------------------------------
983
Wed Jan 11 01:46:14 UTC 2012 - crrodriguez@opensuse.org
984
985
- Update to version 5.3.9
986
  * Drop already applied patches
987
  * This update only contain minor bug fixes, it is a stop over
988
    php 5.4.0 that should be out very soon.
989
990
-------------------------------------------------------------------
991
Mon Jan  2 16:52:43 UTC 2012 - pgajdos@suse.com
992
993
- security update:
994
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
995
    to prevent attacks based on hash collisions
996
997
-------------------------------------------------------------------
998
Wed Dec 21 10:40:03 UTC 2011 - coolo@suse.com
999
1000
- add autoconf as buildrequire to avoid implicit dependency
1001
1002
-------------------------------------------------------------------
1003
Tue Dec 20 12:06:57 UTC 2011 - pgajdos@suse.com
1004
1005
- apache module conflicts with apache2-worker [bnc#728671]
1006
1007
-------------------------------------------------------------------
1008
Fri Dec 16 13:31:56 UTC 2011 - pgajdos@suse.com
1009
1010
- security update:
1011
  * CVE-2011-4566 [bnc#733590]
1012
  * CVE-2011-1466 [bnc#736169]
1013
1014
-------------------------------------------------------------------
1015
Tue Dec  6 12:24:39 UTC 2011 - coolo@suse.com
1016
1017
- fix license - there is no 3.1 version of php license
1018
1019
-------------------------------------------------------------------
1020
Tue Nov 29 15:32:57 UTC 2011 - pgajdos@suse.com
1021
1022
- build php against system's libcrypt, which drops
1023
  extended DES support
1024
  * crypt-tests.patch
1025
  * no-reentrant-crypt.patch
1026
1027
-------------------------------------------------------------------
1028
Mon Nov  7 13:36:25 UTC 2011 - pgajdos@suse.com
1029
1030
- security update:
1031
  CVE-2011-3379 [bnc#728350]
1032
1033
-------------------------------------------------------------------
1034
Sun Sep 18 22:08:00 UTC 2011 - crrodriguez@opensuse.org
1035
1036
- Fix wrong PAGE_SIZE assumption, must use sysconf() instead
1037
- Fix integer overflow when attempting to use more than 2 Gb 
1038
  of memory.
1039
1040
-------------------------------------------------------------------
1041
Mon Sep  5 01:20:22 UTC 2011 - crrodriguez@opensuse.org
1042
1043
- call openssl_config too in order to load user-provided 
1044
  engine configuration.
1045
1046
-------------------------------------------------------------------
1047
Sat Sep  3 05:18:44 UTC 2011 - crrodriguez@opensuse.org
1048
1049
- Cleanup patches for upcoming release.
1050
1051
-------------------------------------------------------------------
1052
Sun Aug 28 20:59:36 UTC 2011 - andrea.turrini@gmail.com
1053
1054
- Fixed typos in php5.spec
1055
1056
-------------------------------------------------------------------
1057
Tue Aug 23 03:35:25 UTC 2011 - crrodriguez@opensuse.org
1058
1059
- Fix very publicized critical bug in crypt() implementation
1060
1061
-------------------------------------------------------------------
1062
Fri Aug 12 02:27:08 UTC 2011 - crrodriguez@opensuse.org
1063
1064
- Add mssql support with freetds 
1065
- Update PHP snapshot.
1066
1067
-------------------------------------------------------------------
1068
Tue Aug  9 22:11:30 UTC 2011 - crrodriguez@opensuse.org
1069
1070
- Update snapshot, more static analyzer fixes. 
1071
1072
-------------------------------------------------------------------
1073
Sun Aug  7 20:32:28 UTC 2011 - crrodriguez@opensuse.org
1074
1075
- Update snapshot, fix converity warnings 
1076
1077
-------------------------------------------------------------------
1078
Fri Aug  5 03:00:45 UTC 2011 - crrodriguez@opensuse.org
1079
1080
- Update snapshot, several check if malloc() succeeded.
1081
1082
-------------------------------------------------------------------
1083
Wed Aug  3 17:51:56 UTC 2011 - crrodriguez@opensuse.org
1084
1085
- Fix build in Factory 
1086
- Fix Segfault with allow_call_time_pass_reference = Off
1087
- Using class constants in array definition fails
1088
1089
-------------------------------------------------------------------
1090
Mon Aug  1 16:38:57 UTC 2011 - crrodriguez@opensuse.org
1091
1092
- Add sqlite3 session storage, this is no more than
1093
  a forward port of already existent sqlite2 backend
1094
1095
-------------------------------------------------------------------
1096
Sun Jul 31 16:06:16 UTC 2011 - crrodriguez@opensuse.org
1097
1098
- Update snap, PHP 5.3.7-RC4 
1099
1100
-------------------------------------------------------------------
1101
Wed Jul 27 04:36:37 UTC 2011 - crrodriguez@opensuse.org
1102
1103
- Update snapshot again. 
1104
1105
-------------------------------------------------------------------
1106
Sat Jul 23 18:27:26 UTC 2011 - crrodriguez@opensuse.org
1107
1108
- Update snapshot. 
1109
1110
-------------------------------------------------------------------
1111
Thu Jul 14 04:42:23 UTC 2011 - crrodriguez@opensuse.org
1112
1113
- is_a() function is throwing an annoying warning 
1114
  "Unknown class passed as parameter" which is noticeable when
1115
  you use PEAR, fix it, if your code uses it you should be
1116
  using the instanceof operator anyway.
1117
- Update bundled pear.
1118
1119
-------------------------------------------------------------------
1120
Mon Jul 11 18:25:52 UTC 2011 - crrodriguez@opensuse.org
1121
1122
- Crash in gc_remove_zval_from_buffer CVE-NO-NAME
1123
- Crash in zend_mm_check_ptr // Heap corruption
1124
1125
-------------------------------------------------------------------
1126
Wed Jul  6 18:55:15 UTC 2011 - crrodriguez@opensuse.org
1127
1128
- Fixed missing Expires and Cache-Control headers for ping and status pages 
1129
- fix crypt() issue with overlong salt
1130
- Fixed bug #52935 (call exit in user_error_handler cause stream relate core).
1131
1132
-------------------------------------------------------------------
1133
Mon Jun 27 04:12:25 UTC 2011 - crrodriguez@opensuse.org
1134
1135
- Fix crash in error_log (strlen with NULL)
1136
- Fixed exit at FPM startup on fpm_resources_prepare
1137
- Added master rlimit_files and rlimit_core
1138
- Removed pid in debug logs written by chrildren processes
1139
- Replaced shm_slots with a real scoreboard 
1140
1141
-------------------------------------------------------------------
1142
Wed Jun 22 21:05:07 UTC 2011 - crrodriguez@opensuse.org
1143
1144
- Enable mysqlnd compression protocol. 
1145
1146
-------------------------------------------------------------------
1147
Thu Jun 16 19:24:49 UTC 2011 - crrodriguez@opensuse.org
1148
1149
- Update snapshot to 5.3.7 RC1  
1150
1151
-------------------------------------------------------------------
1152
Tue Jun 14 17:10:52 UTC 2011 - crrodriguez@opensuse.org
1153
1154
- Allow bison 2.5
1155
-File path injection vulnerability in RFC1867 File upload CVE-2011-2202.
1156
1157
-------------------------------------------------------------------
1158
Fri Jun 10 21:25:59 UTC 2011 - crrodriguez@opensuse.org
1159
1160
- Update 5.3 snap 
1161
- Fix compiler failure that happended after compile error.
1162
- Stream not closed and error not returned when SSL CN_match fails.
1163
1164
-------------------------------------------------------------------
1165
Mon Jun  6 23:08:38 UTC 2011 - crrodriguez@opensuse.org
1166
1167
- Update 5.3 snap 
1168
- Update bundled PEAR 
1169
- Case discrepancy in timezone names cause Uncaught exception and fatal error.
1170
- SEEK_CUR with 0 value, returns a warning
1171
- Restore fix: do not accept paths with NULL in them
1172
1173
-------------------------------------------------------------------
1174
Fri Jun  3 16:35:22 UTC 2011 - crrodriguez@opensuse.org
1175
1176
- Update to version 5.3.6.201106031621
1177
- Crash when calling call_user_func with unknown function name
1178
- Fixed double registering of browscap ini directive
1179
1180
-------------------------------------------------------------------
1181
Sun May 29 20:12:46 UTC 2011 - crrodriguez@opensuse.org
1182
1183
- Drop Update alternatives usage, there are no alternatives
1184
 PHP4 is gone and PHP6 is not coming at any time soon. 
1185
- Remove "mm" support from session module, virtually nothing
1186
  uses it and it doesnt support proper locking, mount 
1187
  /var/lib/php5 in tmpfs instead.
1188
1189
-------------------------------------------------------------------
1190
Sun May 29 17:10:52 UTC 2011 - crrodriguez@opensuse.org
1191
1192
- Update to 5.3.6.201105291701
1193
* Fixes random crash with apache2 SAPI and php_admin_value 
1194
  in virtualhost configuration.
1195
1196
-------------------------------------------------------------------
1197
Fri May 20 02:52:34 UTC 2011 - crrodriguez@opensuse.org
1198
1199
- Update 5.3 branch 
1200
- Fix a few memory leaks
1201
- Check if tempfile can be created in phar extension
1202
- Fix problems with __halt_compiler and imported namespaces
1203
- Properly handle out of memory conditions in mysqlnd
1204
1205
-------------------------------------------------------------------
1206
Sat May 14 17:59:07 UTC 2011 - crrodriguez@opensuse.org
1207
1208
- Update 5.3 branch.
1209
- Fix user after free in xmlreader extension.
1210
1211
-------------------------------------------------------------------
1212
Mon May  9 01:16:17 UTC 2011 - crrodriguez@opensuse.org
1213
1214
- Update to current 5.3 svn version. 
1215
- For practical reasons now the hash extension is built-in,hence
1216
  deprecates package php5-hash, it is nowdays required by the session
1217
  and phar extensions but must be statically built to work.
1218
- Drop php5-session patch, needed only to workaround compile 
1219
  failure when hash extension is built as loadable extension.
1220
- php.ini now clearly says that by "3" in session.hash_function
1221
  we mean SHA256.
1222
1223
-------------------------------------------------------------------
1224
Fri Apr 29 03:33:41 UTC 2011 - crrodriguez@opensuse.org
1225
1226
- Update to a recent 5.3.x SVN version, mostly bug fixes 
1227
 * track_errors causes segfault
1228
 * classes from dl()'ed extensions are not destroyed
1229
 * Crash when assigning value to a dimension in a non-array
1230
 * use-after-free in substr_replace()
1231
1232
-------------------------------------------------------------------
1233
Wed Apr 13 23:39:33 UTC 2011 - crrodriguez@opensuse.org
1234
1235
- fix crash on destruction.
1236
- allow openssl extension to be built w/o SSLv2 
1237
1238
-------------------------------------------------------------------
1239
Tue Apr  5 06:41:50 UTC 2011 - lang@b1-systems.de
1240
1241
- Add a default to date.timezone  because php5 warns that this is a required setting and clutters up the output in zypper installations of pear packages and other places
1242
- Versions after 5.3.6 may make this fatal
1243
1244
-------------------------------------------------------------------
1245
Sat Apr  2 00:52:57 UTC 2011 - crrodriguez@opensuse.org
1246
1247
- Intl extension failed to load [bnc#659868]
1248
- Fix update-alternatives usage,will be dropped in the future. 
1249
1250
-------------------------------------------------------------------
1251
Mon Mar 28 20:46:25 UTC 2011 - sbutler1@illinois.edu
1252
1253
- Add tcpd-devel for building the SNMP extension on SLE_10 and apache_server_SLE_10.
1254
1255
-------------------------------------------------------------------
1256
Thu Mar 17 17:07:26 UTC 2011 - crrodriguez@opensuse.org
1257
1258
- Update to php 5.3.6 final
1259
* Enforce security in the fastcgi protocol parsing with fpm SAPI.
1260
* Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153)
1261
* Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092)
1262
* Fixed bug #54055 (buffer overrun with high values for precision ini setting).
1263
* Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708)
1264
* Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421) 
1265
1266
-------------------------------------------------------------------
1267
Wed Mar 16 03:49:41 UTC 2011 - crrodriguez@opensuse.org
1268
1269
- Upgrade to PHP 5.3.6.RC3 
1270
 * Drop obsoleted patches
1271
 * fix some rpmlint warnings
1272
 * Hundreds of changes, see NEWS for details
1273
1274
-------------------------------------------------------------------
1275
Wed Mar  9 23:57:21 UTC 2011 - crrodriguez@opensuse.org
1276
1277
- Fix more date in binaries causing pointless republish of pkgs.
1278
1279
-------------------------------------------------------------------
1280
Fri Feb 25 09:50:17 UTC 2011 - chris@computersalat.de
1281
1282
- fix for macros.php
1283
  o devel pkg must have Obsoletes/Provides: php-macros
1284
1285
-------------------------------------------------------------------
1286
Tue Feb 22 11:22:52 CET 2011 - pgajdos@suse.cz
1287
1288
- security fixes
1289
  * CVE-2011-0420 [bnc#672933]
1290
  * CVE-2011-0708 [bnc#671710]
1291
1292
-------------------------------------------------------------------
1293
Thu Feb 10 17:06:50 UTC 2011 - chris@computersalat.de
1294
1295
- extend macros.php
1296
  o __php, __phpize, __php_config, php_version
1297
  o __pear, php_peardir, php_pearxmldir
1298
  o php_pear_gen_filelist
1299
- add README.macros
1300
1301
-------------------------------------------------------------------
1302
Thu Jan 13 17:20:40 CET 2011 - pgajdos@suse.cz
1303
1304
- security fix: 
1305
  * fopen_https_proxy_auth_fix.patch [bnc#656523]
1306
1307
-------------------------------------------------------------------
1308
Mon Jan 10 18:52:45 UTC 2011 - cristian.rodriguez@opensuse.org
1309
1310
- export PHP_MYSQLND_ENABLED=yes to solve the mysqlnd problem
1311
 when extensions are built shared. [bnc#661464]
1312
1313
-------------------------------------------------------------------
1314
Mon Jan 10 15:31:19 UTC 2011 - cristian.rodriguez@opensuse.org
1315
1316
- Go back to libmysql as there is currently no way
1317
  to build shared mysql extensions with mysqlnd. [bnc#661464]
1318
1319
-------------------------------------------------------------------
1320
Sun Jan  9 01:32:33 UTC 2011 - cristian.rodriguez@opensuse.org
1321
1322
- Use mysqlnd driver, this is a newer PHP-native mysql 
1323
  extension, that does not require external libraries.
1324
  Now you can use mysql, mariadb or drizzle without extra libs.
1325
  fixes bnc #661464 and other old feature requests.
1326
1327
-------------------------------------------------------------------
1328
Thu Jan  6 22:44:12 UTC 2011 - cristian.rodriguez@opensuse.org
1329
1330
- Update to version 5.3.5, Critical Update
1331
* Fixed bug #53632 (PHP hangs on numeric value 2.2250738585072011e-308). (CVE-2010-4645)
1332
  Only 32 bit binaries affected, confirmed in factory i586.
1333
1334
-------------------------------------------------------------------
1335
Fri Dec 17 21:37:18 UTC 2010 - cristian.rodriguez@opensuse.org
1336
1337
- revert unsuitable patch php-5.3.4-dlopen.patch
1338
1339
-------------------------------------------------------------------
1340
Tue Dec 14 23:19:26 UTC 2010 - cristian.rodriguez@opensuse.org
1341
1342
- Add  php-5.3.4-dlopen.patch from fedora,makes dlopen to use
1343
  bind_now instead of lazy.
1344
- Compiler is now in C99 mode for both core and extensions. 
1345
1346
-------------------------------------------------------------------
1347
Tue Dec 14 01:08:07 UTC 2010 - cristian.rodriguez@opensuse.org
1348
1349
- fix format string bug in Phar extension I just found
1350
  http://bugs.php.net/bug.php?id=53541 and the underlying
1351
  issue, which is the lack of format attributes in several
1352
  core prototypes.
1353
1354
-------------------------------------------------------------------
1355
Mon Dec 13 01:53:50 UTC 2010 - cristian.rodriguez@opensuse.org
1356
1357
- Update to PHP 5.3.4 final
1358
* Fixed crash in zip extract method (possible CWE-170).
1359
* Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
1360
* Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
1361
* Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
1362
* Fixed possible flaw in open_basedir (CVE-2010-3436).
1363
* Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
1364
* Fixed symbolic resolution support when the target is a DFS share.
1365
* Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
1366
* Key Bug Fixes in PHP 5.3.4 include:
1367
* Added stat support for zip stream.
1368
* Added follow_location (enabled by default) option for the http stream support.
1369
* Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
1370
* Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
1371
* Multiple improvements to the FPM SAPI.
1372
* Over 100 other bug fixes. 
1373
- SUSE specific;
1374
* enable PTY support in proc_open (temporary)
1375
1376
-------------------------------------------------------------------
1377
Wed Nov 24 01:47:31 CET 2010 - ro@suse.de
1378
1379
- xft-config is gone 
1380
1381
-------------------------------------------------------------------
1382
Tue Nov  2 02:23:00 UTC 2010 - cristian.rodriguez@opensuse.org
1383
1384
- Update to 5.3.3_svn201011020214
1385
* Fix Performance issue, array_diff may take hours instead
1386
  of seconds in some scenarios,regression appeared in version
1387
  5.2.5 
1388
1389
-------------------------------------------------------------------
1390
Wed Oct 27 22:09:03 UTC 2010 - cristian.rodriguez@opensuse.org
1391
1392
- Update to 5.3.3_svn20101027xx
1393
- Fix init script again. 
1394
1395
-------------------------------------------------------------------
1396
Thu Oct 14 03:36:44 UTC 2010 - crrodriguez@opensuse.org
1397
1398
- update to 5.3.3_svn201010140300
1399
- Fix php-fpm init script. 
1400
1401
-------------------------------------------------------------------
1402
Sat Oct  9 16:20:10 UTC 2010 - cristian.rodriguez@opensuse.org
1403
1404
- Update to an slightly newer PHP 5.3.3.x snap, fixes
1405
  around 100 bugs including open_basedir problems.
1406
- add the fpm sapi to the package. 
1407
1408
-------------------------------------------------------------------
1409
Tue Aug  3 04:36:49 UTC 2010 - cristian.rodriguez@opensuse.org
1410
1411
- Clarify changelog this update fixed:
1412
  * VUL-0: php5 new unserialize() flaw CVE-2010-2225 [bnc#616232]
1413
  * VUL-0: php5: MOPS-2010-021: fnmatch() Stack Exhaustion Vulnerability [bnc#605097]
1414
  * VUL-0: php5: MOPS-2010-017: preg_quote() Interruption Information Leak [bnc#605100]
1415
  * VUL-0: php5: MOPS-2010-022 use after free [bnc#609763]
1416
  * VUL-0: php5-phar: MOPS-2010-0{24,25,26,27,28} format string bugs [bnc#609766]
1417
  * VUL-0: php5: MOPS-2010-0{32,33,34} use space interruption in iconv functions [bnc#609768]
1418
  * VUL-0: php5: MOPS-2010-0{36,37,38,39,40} userspace interruptions [bnc#609769]
1419
  * VUL-0: php5: MOPS-2010-0{36..46} userspace interruptions [bnc#609769]
1420
  * VUL-0: php5: MOPS-2010-047/048 information leak [bnc#612555]
1421
  * VUL-0: php5: MOPS-2010-049/50/51/52/53/54/55 memory corruption and/or info leak [bnc#612556]
1422
  * VUL-0: PHP5: Session Data Injection Vulnerability [bnc#619483]
1423
  * VUL-0: PHP5: multiple heap based buffer overflows [bnc#619486]
1424
  * bugzilla numbers 619487,619489,619469,609766..
1425
1426
-------------------------------------------------------------------
1427
Tue Jul 20 03:15:19 UTC 2010 - cristian.rodriguez@opensuse.org
1428
1429
- Update to PHP 5.3.3 RC3
1430
- Massive lot of security fixes see list 
1431
  here http://www.php-security.org/category/vulnerabilities/index.html 
1432
1433
-------------------------------------------------------------------
1434
Tue Jun  1 16:32:20 UTC 2010 - cristian.rodriguez@opensuse.org
1435
1436
- possible fix for [bnc#610633] 
1437
1438
-------------------------------------------------------------------
1439
Fri Apr 16 15:51:49 UTC 2010 - crrodriguez@opensuse.org
1440
1441
- use FD_CLOEXEC flag to avoid annoying races.
1442
1443
-------------------------------------------------------------------
1444
Sun Apr  4 12:43:07 UTC 2010 - crrodriguez@opensuse.org
1445
1446
- remove obsolete buildRequires 
1447
1448
-------------------------------------------------------------------
1449
Fri Apr  2 14:59:46 UTC 2010 - crrodriguez@opensuse.org
1450
1451
- remove build date from binaries so they dont get
1452
   republished every time
1453
- fix invalid path 
1454
1455
-------------------------------------------------------------------
1456
Thu Apr  1 22:03:47 UTC 2010 - crrodriguez@opensuse.org
1457
1458
-  add missing patch, refresh patches with -p0
1459
1460
-------------------------------------------------------------------
1461
Thu Apr  1 21:38:12 UTC 2010 - crrodriguez@opensuse.org
1462
1463
- Update to PHP 5.3.2, see NEWS for details
1464
1465
-------------------------------------------------------------------
1466
Fri Mar  5 23:06:10 UTC 2010 - dimstar@opensuse.org
1467
1468
- Add php5-autoconf-2.65.patch to fix build with autoconf 2.65; it's
1469
  a backported combination of svn commits 291283, 291284 and
1470
  291332.
1471
- Workaround old php bug http://bugs.php.net/bug.php?id=21153 by
1472
  replacing -ledit with -ledit -lncurses in the resulting configure
1473
  scripts. This became apparent problem due to libedit being built
1474
  with as-needed now.
1475
- Add php5-bug51224.patch to fix buffer overflows happening in
1476
  strcpy. It;s a combination of upstream svn revs 284097 and 284099
1477
1478
-------------------------------------------------------------------
1479
Sun Jan 17 16:47:17 CET 2010 - vuntz@opensuse.org
1480
1481
- Remove unneeded gtk-devel BuildRequires.
1482
1483
-------------------------------------------------------------------
1484
Mon Jan 11 13:36:50 UTC 2010 - aj@suse.de
1485
1486
- Remove obsolete build requires of orbit-devel.
1487
1488
-------------------------------------------------------------------
1489
Tue Dec 22 18:36:04 CET 2009 - jengelh@medozas.de
1490
1491
- avoid alignment crash on alignment-sensitive CPUs
1492
  (bugs.php.net#46074)
1493
1494
-------------------------------------------------------------------
1495
Wed Dec  2 18:27:41 UTC 2009 - coolo@novell.com
1496
1497
- update patch to fix build
1498
1499
-------------------------------------------------------------------
1500
Tue Oct  6 21:56:32 UTC 2009 - crrodriguez@opensuse.org
1501
1502
- Fixed wrong harcoded mysql socket  [bnc#544516]
1503
- Fixed wrong default include_path
1504
1505
-------------------------------------------------------------------
1506
Tue Sep  8 13:20:55 CEST 2009 - crrodriguez@suse.de
1507
1508
- make php5-pear noarch in Factory 
1509
1510
-------------------------------------------------------------------
1511
Wed Aug 26 15:30:59 CEST 2009 - crrodriguez@suse.de
1512
1513
- remove obsolete patches
1514
- apply ini patch
1515
- enable mhash compatibility in the hash extension and obsolete php5-mhash
1516
- add macros.php to the source list
1517
1518
-------------------------------------------------------------------
1519
Mon Aug 24 02:53:28 CEST 2009 - crrodriguez@suse.de
1520
1521
- PHP read_exif_data() only returns the first letter of UTF-16 strings [bnc#518300] 
1522
1523
-------------------------------------------------------------------
1524
Sun Aug 23 23:03:49 CEST 2009 - crrodriguez@suse.de
1525
1526
- fix missing return values of suhosin extension 
1527
1528
-------------------------------------------------------------------
1529
Thu Aug 20 00:03:39 CEST 2009 - crrodriguez@novell.com
1530
1531
- fix build on CODE10 products 
1532
1533
-------------------------------------------------------------------
1534
Wed Aug 19 23:45:26 CEST 2009 - crrodriguez@novell.com
1535
1536
- fix horrible broken open_basedir functionality 
1537
1538
-------------------------------------------------------------------
1539
Sun Aug 16 16:19:19 CEST 2009 - crrodriguez@suse.de
1540
1541
- update suhosin extension to version 0.9.29
1542
- mysql extensions now use mysqlnd instead of libmysqlclient.
1543
- enable sqlite3 extension, part of the php5-sqlite package
1544
- enable enchant extension
1545
- enable fileinfo extension
1546
- enable intl extension
1547
1548
-------------------------------------------------------------------
1549
Fri Aug 14 23:57:25 CEST 2009 - crrodriguez@suse.de
1550
1551
- add suhosin patch and newer suhosin extension for compatibility
1552
  reasons 
1553
1554
-------------------------------------------------------------------
1555
Thu Aug 13 21:23:57 CEST 2009 - crrodriguez@suse.de
1556
1557
-  Upgrade to PHP 5.3, see http://www.php.net/ChangeLog-5.php
1558
   for the huge list of changes
1559
-  remove dbase and ncurses extension
1560
1561
-------------------------------------------------------------------
1562
Thu Jul 16 15:44:47 CEST 2009 - coolo@novell.com
1563
1564
- disable as-needed to fix build
1565
1566
1567
-------------------------------------------------------------------
1568
Fri Jun 19 14:06:27 CEST 2009 - crrodriguez@suse.de
1569
1570
- update to PHP 5.2.10
1571
    *Fixed bug #48378 (exif_read_data() segfaults on certain corrupted .jpeg files)
1572
    * Added "ignore_errors" option to http fopen wrapper. (David Zulke, Sara)
1573
    * Fixed memory corruptions while reading properties of zip files. (Ilia)
1574
    * Fixed memory leak in ob_get_clean/ob_get_flush. (Christian)
1575
    * Fixed segfault on invalid session.save_path. (Hannes)
1576
    * Fixed leaks in imap when a mail_criteria is used. (Pierre)
1577
    * Changed default value of array_unique()'s optional sorting type parameter back to SORT_STRING to fix backwards compatibility breakage introduced in PHP 5.2.9. (Moriyoshi)
1578
    * Fixed bug #47940 (memory leaks in imap_body). (Pierre, Jake Levitt)
1579
    * Fixed bug #47903 ("@" operator does not work with string offsets). (Felipe)
1580
    * Fixed bug #47644 (Valid integers are truncated with json_decode()). (Scott)
1581
    * Fixed bug #47564 (unpacking unsigned long 32bit big endian returns wrong result). (Ilia)
1582
    * Fixed bug #47365 (ip2long() may allow some invalid values on certain 64bit systems).
1583
    * Over 100 bug fixes.
1584
 
1585
-------------------------------------------------------------------
1586
Thu May 21 22:29:41 CEST 2009 - crrodriguez@suse.de
1587
1588
- add temporary backport of openssl prng function 
1589
1590
-------------------------------------------------------------------
1591
Sat Mar 14 18:38:21 CET 2009 - crrodriguez@suse.de
1592
1593
- Update to version 5.2.9, security and bugfix release
1594
  * VUL-0: php5: memory disclosure by imagerotate() [bnc#480850]
1595
  * VUL-0: php5: mbstring.func_overload set in .htaccess becomes global [bnc#471419]
1596
  * Fixed a segfault when malformed string is passed to json_decode()
1597
  * Fixed explode() behavior with empty string to respect negative limit.  
1598
1599
-------------------------------------------------------------------
1600
Sun Dec 14 16:55:52 CET 2008 - crrodriguez@suse.de
1601
1602
- remove ming extension, moved to server:php:extensions later 
1603
1604
-------------------------------------------------------------------
1605
Tue Dec  9 05:50:38 CET 2008 - crrodriguez@suse.de
1606
1607
- Update to PHP 5.2.8 
1608
1609
-------------------------------------------------------------------
1610
Mon Dec  8 17:30:53 CET 2008 - crrodriguez@suse.de
1611
1612
- fix BLOCKER magic_quotes breakage, if your code
1613
  relies on this feature, it is broken,time to press the panic button. 
1614
1615
-------------------------------------------------------------------
1616
Fri Dec  5 16:26:42 CET 2008 - crrodriguez@suse.de
1617
1618
- update to PHP 5.2.7 final, no mayor changes since RC5 
1619
1620
-------------------------------------------------------------------
1621
Fri Nov 28 15:26:15 CET 2008 - crrodriguez@suse.de
1622
1623
- update to PHP 5.2.7RC5 see news for details 
1624
1625
-------------------------------------------------------------------
1626
Fri Nov 21 02:22:25 CET 2008 - crrodriguez@suse.de
1627
1628
- update to PHP 5.2.7RC4, see news for details 
1629
1630
-------------------------------------------------------------------
1631
Sun Nov 16 04:43:25 CET 2008 - crrodriguez@suse.de
1632
1633
- update to PHP 5.2.7RC3, see NEWS for details 
1634
1635
-------------------------------------------------------------------
1636
Mon Sep  8 10:38:25 CEST 2008 - crrodriguez@suse.de
1637
1638
- update suhosin to version 0.9.27
1639
    * Fixed problem with suhosin.perdir
1640
      Thanks to Hosteurope for tracking this down
1641
    * Fixed problems with ext/uploadprogress
1642
      Reported by: Christian Stocker
1643
    * Added suhosin.srand.ignore and suhosin.mt_srand.ignore (default: on)
1644
    * Modified rand()/srand() to use the Mersenne Twister algorithm with separate state
1645
    * Added better internal seeding of rand() and mt_rand()
1646
1647
-------------------------------------------------------------------
1648
Mon Jul 14 00:14:13 CEST 2008 - crrodriguez@suse.de
1649
1650
- merge patches from schwab 
1651
1652
-------------------------------------------------------------------
1653
Fri May  2 10:12:59 CEST 2008 - crrodriguez@suse.de
1654
1655
- update to PHP 5.2.6
1656
   * Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.
1657
   * Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
1658
   * Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
1659
   * Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
1660
   * Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.
1661
   * Fixed two possible crashes inside the posix extension.
1662
   * Fixed bug #44069 (Huge memory usage with concatenation using . instead of .=)
1663
   * Fixed bug #44141 (private parent constructor callable through static function).
1664
   * Fixed bug #43589 (a possible infinite loop in bz2_filter.c).
1665
   * Fixed bug #43450 (Memory leak on some functions with implicit object __toString() call).
1666
   * Fixed bug #43201 (Crash on using uninitialized vals and __get/__set).
1667
   * Fixed bug #42978 (mismatch between number of bound params and values causes a crash in pdo_pgsql).
1668
   * Fixed bug #42937 (__call() method not invoked when methods are called on parent from child class).
1669
   * Fixed bug #42736 (xmlrpc_server_call_method() crashes).
1670
   * Fixed bug #42369 (Implicit conversion to string leaks memory).
1671
   * Fixed bug #41562 (SimpleXML memory issue).
1672
   * Fixed bug #43606 (define missing depencies of the exif extension). (crrodriguez at suse dot de)
1673
   * Fixed bug #43498 (file_exists() on a proftpd server got SIZE not allowed in ASCII mode). (Ilia, crrodriguez at suse dot de)
1674
   * Over 120 bug fixes.
1675
1676
-------------------------------------------------------------------
1677
Wed Feb  6 00:37:17 CET 2008 - crrodriguez@suse.de
1678
1679
- update suhosin extension to version 0.9.23 
1680
- Fixed suhosin extension now compiles with snapshots of PHP 5.3
1681
- Fixed crypt() behaves like normal again when there is no salt supplied
1682
- wrong Obsoletes causes upgrade trouble [bnc #355618]
1683
1684
-------------------------------------------------------------------
1685
Fri Feb  1 10:47:45 CET 2008 - mmarek@suse.cz
1686
1687
- use %%_with_ming and %%_with_qdbm instead of %%opensuse_bs,
1688
  enables building in the bs in other projects than server:php
1689
  (bnc#357917)
1690
1691
-------------------------------------------------------------------
1692
Fri Jan 11 08:06:38 CET 2008 - crrodriguez@suse.de
1693
1694
- Try patch recently published by Redhat that allows PHP to
1695
  use the system timezone database instead of the bundled one.
1696
1697
-------------------------------------------------------------------
1698
Mon Jan  7 07:07:53 CET 2008 - crrodriguez@suse.de
1699
1700
- Do not hard require php5-timezonedb, instead provide a capability
1701
  php(tzdatabase) = builtin_tz_ver so it gets installed via rpm
1702
  Supplements only when needed.
1703
1704
-------------------------------------------------------------------
1705
Thu Dec 27 08:10:15 CET 2007 - crrodriguez@suse.de
1706
1707
- PHP is leaking file descriptors badly on relative includes 
1708
  (php-5.2.5-fdleak.patch) 
1709
1710
1711
-------------------------------------------------------------------
1712
Thu Dec 13 05:35:08 CET 2007 - crrodriguez@suse.de
1713
1714
- suhosin 0.9.22
1715
  - Fixed function_exists() now checks the Suhosin permissions
1716
  - Fixed crypt() salt no longer uses Blowfish by default
1717
  - Fixed .htaccess/perdir support
1718
  - Fixed compilation problem on OS/X
1719
  - Added protection against some attacks through _SERVER variables
1720
  - Added suhosin.server.strip and suhosin.server.encode
1721
 
1722
1723
-------------------------------------------------------------------
1724
Tue Dec 11 06:37:03 CET 2007 - crrodriguez@suse.de
1725
1726
- use /dev/urandom for generating session-IDs [#337005]
1727
- L3: PHP: Venezuela Time Zone Update starting date changed to December 9 [#345548] 
1728
1729
-------------------------------------------------------------------
1730
Mon Nov 12 06:40:39 CET 2007 - crrodriguez@suse.de
1731
1732
- update to PHP 5.2.5
1733
  * Fixed dl() to only accept filenames. reported by Laurent Gaffie.
1734
  * Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887).
1735
  * Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences.
1736
  * Fixed possible triggering of buffer overflows inside glibc implementations of the fnmatch(), setlocale() and glob() functions. Reported by Laurent Gaffie.
1737
  * Fixed "mail.force_extra_parameters" php.ini directive not to be modifiable in .htaccess due to the security implications reported by SecurityReason.
1738
  * Fixed bug #42869 (automatic session id insertion adds sessions id to non-local forms).
1739
  * Fixed bug #41561 (Values set with php_admin_* in httpd.conf can be overwritten with ini_set()).
1740
  * Upgraded PCRE to version 7.3 (Nuno)
1741
  * Added optional parameter $provide_object to debug_backtrace(). (Sebastian)
1742
  * Added alpha support for imagefilter() IMG_FILTER_COLORIZE. (Pierre)
1743
  * Added ability to control memory consumption between request using ZEND_MM_COMPACT environment variable. (Dmitry)
1744
  * Improved speed of array_intersect_key(), array_intersect_assoc(), array_uintersect_assoc(), array_diff_key(), array_diff_assoc() and array_udiff_assoc(). (Dmitry)
1745
  * Fixed move_uploaded_file() to always set file permissions of resulting file according to UMASK. (Andrew Sitnikov)
1746
  * Fixed possible crash in ext/soap because of uninitialized value. (Zdash Urf)
1747
  * Fixed regression in glob() when enforcing safe_mode/open_basedir checks on paths containing '*'. (Ilia)
1748
  * Fixed PDO crash when driver returns empty LOB stream. (Stas)
1749
  * Fixed iconv_*() functions to limit argument sizes as workaround to libc bug (CVE-2007-4783, CVE-2007-4840 by Laurent Gaffie). (Christian Hoffmann, Stas)
1750
  * Fixed missing brackets leading to build warning and error in the log. Win32 code. (Andrey)
1751
  * Fixed leaks with multiple connects on one mysqli object. (Andrey)
1752
  * Fixed imagerectangle regression with 1x1 rectangle (libgd #106). (Pierre)
1753
  * Fixed bug #43196 (array_intersect_assoc() crashes with non-array input). (Jani)
1754
  * Fixed bug #43139 (PDO ignores ATTR_DEFAULT_FETCH_MODE in some cases with fetchAll()). (Ilia)
1755
  * Fixed bug #43137 (rmdir() and rename() do not clear statcache). (Jani)
1756
  * Fixed bug #43130 (Bound parameters cannot have - in their name). (Ilia)
1757
  * Fixed bug #43099 (XMLWriter::endElement() does not check # of params). (Ilia)
1758
  * Fixed bug #43020 (Warning message is missing with shuffle() and more than one argument). (Scott)
1759
  * Fixed bug #42976 (Crash when constructor for newInstance() or newInstanceArgs() fails) (Ilia)
1760
  * Fixed bug #42917 (PDO::FETCH_KEY_PAIR doesn't work with setFetchMode). (Ilia)
1761
  * Fixed bug #42890 (Constant "LIST" defined by mysqlclient and c-client). (Andrey)
1762
  * Fixed bug #42818 ($foo = clone(array()); leaks memory). (Dmitry)
1763
  * Fixed bug #42817 (clone() on a non-object does not result in a fatal error). (Ilia)
1764
  * Fixed bug #42785 (json_encode() formats doubles according to locale rather then following standard syntax). (Ilia)
1765
  * Fixed bug #42783 (pg_insert() does not accept an empty list for insertion). (Ilia)
1766
  * Fixed bug #42773 (WSDL error causes HTTP 500 Response). (Dmitry)
1767
  * Fixed bug #42772 (Storing $this in a static var fails while handling a cast to string). (Dmitry)
1768
  * Fixed bug #42767 (highlight_string() truncates trailing comment). (Ilia)
1769
  * Fixed bug #42739 (mkdir() doesn't like a trailing slash when safe_mode is enabled). (Ilia)
1770
  * Fixed bug #42703 (Exception raised in an iterator::current() causes segfault in FilterIterator) (Marcus)
1771
  * Fixed bug #42699 (PHP_SELF duplicates path). (Dmitry)
1772
  * Fixed bug #42654 (RecursiveIteratorIterator modifies only part of leaves) (Marcus)
1773
  * Fixed bug #42643 (CLI segfaults if using ATTR_PERSISTENT). (Ilia)
1774
  * Fixed bug #42637 (SoapFault : Only http and https are allowed). (Bill Moran)
1775
  * Fixed bug #42627 (bz2 extension fails to build with -fno-common). (dolecek at netbsd dot org)
1776
  * Fixed bug #42596 (session.save_path MODE option does not work). (Ilia)
1777
  * Fixed bug #42590 (Make the engine recognize \v and \f escape sequences). (Ilia)
1778
  * Fixed bug #42587 (behavior change regarding symlinked .php files). (Dmitry)
1779
  * Fixed bug #42579 (apache_reset_timeout() does not exist). (Jani)
1780
  * Fixed bug #42549 (ext/mysql failed to compile with libmysql 3.23). (Scott)
1781
  * Fixed bug #42523 (PHP_SELF duplicates path). (Dmitry)
1782
  * Fixed bug #42512 (ip2long('255.255.255.255') should return 4294967295 on 64-bit PHP). (Derick)
1783
  * Fixed bug #42506 (php_pgsql_convert() timezone parse bug) (nonunnet at gmail dot com, Ilia)
1784
  * Fixed bug #42462 (Segmentation when trying to set an attribute in a DOMElement). (Rob)
1785
  * Fixed bug #42453 (CGI SAPI does not shut down cleanly with -i/-m/-v cmdline options). (Dmitry)
1786
  * Fixed bug #42452 (PDO classes do not expose Reflection API information). (Hannes)
1787
  * Fixed bug #42468 (Write lock on file_get_contents fails when using a compression stream). (Ilia)
1788
  * Fixed bug #42488 (SoapServer reports an encoding error and the error itself breaks). (Dmitry)
1789
  * Fixed bug #42378 (mysqli_stmt_bind_result memory exhaustion). (Andrey)
1790
  * Fixed bug #42359 (xsd:list type not parsed). (Dmitry)
1791
  * Fixed bug #42326 (SoapServer crash). (Dmitry)
1792
  * Fixed bug #42214 (SoapServer sends clients internal PHP errors). (Dmitry)
1793
  * Fixed bug #42189 (xmlrpc_set_type() crashes php on invalid datetime values). (Ilia)
1794
  * Fixed bug #42139 (XMLReader option constants are broken using XML()). (Rob)
1795
  * Fixed bug #42086 (SoapServer return Procedure '' not present for WSIBasic compliant wsdl). (Dmitry)
1796
  * Fixed bug #41822 (Relative includes broken when getcwd() fails). (Ab5602, Jani)
1797
  * Fixed bug #39651 (proc_open() append mode doesn't work on windows). (Nuno) 
1798
1799
-------------------------------------------------------------------
1800
Thu Aug 30 03:52:35 CEST 2007 - crrodriguez@suse.de
1801
1802
- update to PHP 5.2.4, no relevant changes since RC3.
1803
1804
-------------------------------------------------------------------
1805
Fri Aug 24 11:11:41 CEST 2007 - crrodriguez@suse.de
1806
1807
- PHP 5.2.4RC3
1808
- Fixed version_compare() to support "rc" as well as "RC" for release
1809
  candidate version numbers.
1810
- Fixed bug #42368 (Incorrect error message displayed by pg_escape_string).
1811
  (Ilia)
1812
- Fixed phpbug #42365 and Novell bugzilla #292998 (glob() crashes and/or accepts way too many flags). (Jani)
1813
- Fixed bug #42183 (classmap causes crash in non-wsdl mode). (Dmitry)
1814
- Fixed bug #42009 (is_a() and is_subclass_of() should NOT call autoload,
1815
  in the same way as "instanceof" operator). (Dmitry)
1816
- Fixed bug #41904 (proc_open(): empty env array should cause empty
1817
  environment to be passed to process). (Jani)
1818
- Fixed bug #37273 (Symlinks and mod_files session handler allow open_basedir
1819
  bypass). (Ilia)
1820
- remove wrong hardcoded requirement on libedit
1821
- devel package at least does not need libtool the php build enviroment uses a private copy. 
1822
- drop no longer needed patches already in upstream
1823
1824
-------------------------------------------------------------------
1825
Fri Aug 17 14:46:08 CEST 2007 - anosek@suse.cz
1826
1827
- updated to version 5.2.4RC2
1828
  - Fixed oci8 and PDO_OCI extensions to allow configuring with Oracle 11g client
1829
    libraries. (Chris Jones)
1830
  - Fixed bug #42292 ($PHP_CONFIG not set for phpized builds). (Jani)
1831
  - Fixed bug #42261 (header wrong for date field). (roberto at spadim dot com
1832
    dot br, Ilia)
1833
  - Fixed bug #42259 (SimpleXMLIterator loses ancestry). (Rob)
1834
  - Fixed bug #42247 (ldap_parse_result() not defined under win32). (Jani)
1835
  - Fixed bug #42243 (copy() does not output an error when the first arg is a
1836
    dir). (Ilia)
1837
  - Fixed bug #42242 (sybase_connect() crashes). (Ilia)
1838
  - Fixed bug #42237 (stream_copy_to_stream returns invalid values for mmaped
1839
    streams). (andrew dot minerd at sellingsource dot com, Ilia)
1840
  - Fixed bug #42222 (possible buffer overflow in php_openssl_make_REQ). (Pierre)
1841
  - Fixed bug #42211 (property_exists() fails to find protected properties from
1842
    a parent class). (Dmitry)
1843
  - Fixed bug #42208 (substr_replace() crashes when the same array is passed
1844
    more than once). (crrodriguez at suse dot de, Ilia)
1845
  - Fixed bug #42198 (SCRIPT_NAME and PHP_SELF truncated when inside a userdir
1846
    and using PATH_INFO). (Dmitry)
1847
  - Fixed bug #42195 (C++ compiler required always). (Jani)
1848
  - Fixed bug #42117 (bzip2.compress loses data in internal buffer). (Philip,
1849
    Ilia)
1850
  - Fixed bug #42082 (NodeList length zero should be empty). (Hannes)
1851
  - Fixed bug #36492 (Userfilters can leak buckets). (Sara)
1852
  - Fixed bug #31892 (PHP_SELF incorrect without cgi.fix_pathinfo, but turning
1853
    on screws up PATH_INFO). (Dmitry) 
1854
1855
-------------------------------------------------------------------
1856
Mon Aug  6 19:28:46 CEST 2007 - anosek@suse.cz
1857
1858
- updated to version 5.2.4RC1
1859
- dropped obsoleted PHP_5_2-CVS-2007-07-30.patch.bz2
1860
1861
-------------------------------------------------------------------
1862
Mon Jul 30 15:31:19 CEST 2007 - mmarek@suse.cz
1863
1864
- updated to latest state of PHP_5_2 branch; highlights from the
1865
  NEWS file:
1866
  - Upgraded PCRE to version 7.2 (Nuno)
1867
  - Updated timezone database to version 2007.6. (Derick)
1868
  - Improved openssl_x509_parse() to return extensions in readable
1869
    form.  (Dmitry)
1870
  - Changed "display_errors" php.ini option to accept "stderr" as
1871
    value which makes the error messages to be outputted to STDERR
1872
    instead of STDOUT with CGI and CLI SAPIs (FR #22839). (Jani)
1873
  - Changed error handler to send HTTP 500 instead of blank page on
1874
    PHP errors.  (Dmitry, Andrei Nigmatulin)
1875
  - Added check for unknown options passed to configure. (Jani)
1876
  - Added persistent connection status checker to pdo_pgsql.
1877
    (Elvis Pranskevichus, Ilia)
1878
  - Added support for ATTR_TIMEOUT inside pdo_pgsql driver. (Ilia)
1879
  - Added php_ini_loaded_file() function which returns the path to
1880
    the actual php.ini in use. (Jani)
1881
  - Added GD version constants GD_MAJOR_VERSION, GD_MINOR_VERSION
1882
    GD_RELEASE_VERSION, GD_EXTRA_VERSION and GD_VERSION_STRING.
1883
    (Pierre)
1884
  - Added missing open_basedir checks to CGI.  (anight at
1885
    eyelinkmedia dot com, Tony)
1886
  - Added missing format validator to unpack() function. (Ilia)
1887
  - Added missing error check inside bcpowmod(). (Ilia)
1888
  - Added CURLOPT_PRIVATE & CURLINFO_PRIVATE constants.  (Andrey A.
1889
    Belashkov, Tony)
1890
  - Added missing MSG_EOR and MSG_EOF constants to sockets
1891
    extension. (Jani)
1892
  - Added PCRE_VERSION constant. (Tony)
1893
  - Added ReflectionExtension::info() function to print the
1894
    phpinfo() block for an extension. (Johannes)
1895
  - Implemented FR #41884 (ReflectionClass::getDefaultProperties()
1896
    does not handle static attributes). (Tony)
1897
  - plus lots of bugfixes
1898
- fixed the pear phar archive to run with 5.2.4
1899
  [http://bugs.php.net/bug.php?id=42146]
1900
1901
-------------------------------------------------------------------
1902
Wed Jul 25 10:11:15 CEST 2007 - mmarek@suse.cz
1903
1904
- added /var/lib/pear to php5-pear.rpm
1905
1906
-------------------------------------------------------------------
1907
Tue Jul 24 12:34:32 UTC 2007 - judas_iscariote@shorewall.net
1908
1909
- fix nasty deadlock in pear
1910
- update php5-ze2-fixes.patch and actually apply it. 
1911
1912
-------------------------------------------------------------------
1913
Tue Jul 17 07:52:46 CEST 2007 - anosek@suse.cz
1914
1915
- fixed YOU honors Recommends, breaks php update [#291551]
1916
  (moved php-suhosin from Recommends to Suggests) 
1917
1918
-------------------------------------------------------------------
1919
Mon Jun 25 12:07:56 CEST 2007 - mmarek@suse.cz
1920
1921
- provide /srv/www/cgi-bin/php5 compat symlink instead of patching
1922
  config files
1923
1924
-------------------------------------------------------------------
1925
Sat Jun 23 11:03:50 UTC 2007 - judas_iscariote@shorewall.net
1926
1927
- fixed a mess with update-alternatives PreReq uncovered by newer build versions. 
1928
  actually every subpackage that uses update-alternatives should PreReq it.
1929
- fix some ZE2 bugs.
1930
1931
-------------------------------------------------------------------
1932
Tue Jun 12 14:33:57 CEST 2007 - mmarek@suse.cz
1933
1934
- drop php5.xpm and the Icon: line from the specfile (the icon is
1935
  not used at all and it breaks rpm -q --specfile php5.spec)
1936
1937
-------------------------------------------------------------------
1938
Fri Jun  1 03:23:28 UTC 2007 - judas_iscariote@shorewall.net
1939
1940
- PHP version 5.2.3 see http://www.php.net/releases/5_2_3.php
1941
- important: PHP-cgi now lives in /usr, package attempts to fix both
1942
  lighttpd and apache2 fastcgi config files.
1943
-------------------------------------------------------------------
1944
Wed May 30 01:36:58 UTC 2007 - judas_iscariote@shorewall.net
1945
1946
- use system re2c in factory.
1947
- enable support for qbdm in the dba extension (build service only)
1948
- enable the ming extension (build service only) 
1949
1950
-------------------------------------------------------------------
1951
Mon May 21 12:00:45 CEST 2007 - mmarek@suse.cz
1952
1953
- fixed the dba extension adding -ldb-4.x to global LDFLAGS,
1954
  causing unnecessary dependency in /usr/bin/php5
1955
  [http://bugs.php.net/bug.php?id=41455]
1956
1957
-------------------------------------------------------------------
1958
Sat May 19 22:59:37 UTC 2007 - judas_iscariote@shorewall.net
1959
1960
- updated suhosin to version 0.9.20, security fix + bugfixes
1961
see http://www.hardened-php.net/suhosin/changelog.html for more detail.
1962
1963
-------------------------------------------------------------------
1964
Mon May 14 03:13:01 UTC 2007 - judas_iscariote@shorewall.net
1965
1966
- fix devel package, in the reality PHP does not currenly require expat.
1967
 headers provides a expat compatibility layer but it is no longer in use
1968
 by our packages as libxml2 is always prefered, (and HAVE_LIBEXPAT is not defined)
1969
1970
-------------------------------------------------------------------
1971
Fri May 11 13:22:29 UTC 2007 - judas_iscariote@shorewall.net
1972
1973
- update php5-test-fixes fixing another bug in zend_compile.c
1974
- use rpm macros in the spec file
1975
- when removing apache2-mod_php5, unload it from apache first.
1976
- when updating apache2-mod_php5 restart apache with restart on update macro.
1977
1978
-------------------------------------------------------------------
1979
Sun May  6 21:49:54 UTC 2007 - judas_iscariote@shorewall.net
1980
1981
- HTTP_RAW_POST_DATA superglobal broken (php5-phpbug-41293.patch)
1982
- better fix for MOPB 41.
1983
1984
-------------------------------------------------------------------
1985
Sat May  5 00:59:25 UTC 2007 - judas_iscariote@shorewall.net
1986
1987
- remove --enable-memory-limit configure flag, it disappeared in 5.2.1,
1988
        nowdays memory_limit is always enabled.
1989
1990
-------------------------------------------------------------------
1991
Fri May  4 13:16:05 CEST 2007 - prusnak@suse.cz
1992
1993
- changed expat to libexpat-devel in Requires of devel subpackage
1994
1995
-------------------------------------------------------------------
1996
Fri May  4 09:58:35 UTC 2007 - judas_iscariote@shorewall.net
1997
1998
- add php5-test-fixes.patch fixing a test case that wont pass on i586
1999
as well a real fix for Zend/tests/bug41117_1.phpt problem, that was commited
2000
after the release was done. there is another test case that fails in 10.2
2001
ext/pcre/tests/bug40195.phpt but this is not a PHP problem but a bug in PCRE.
2002
2003
- added missing fix for PMOPB-45-2007 PHP ext/filter Email Validation Vulnerability (minor)
2004
2005
-------------------------------------------------------------------
2006
Fri May  4 05:58:13 UTC 2007 - judas_iscariote@shorewall.net
2007
2008
- php5-devel package now requires pcre-devel for > 10.1 as 5.2.2 installs
2009
  php_pcre.h header that needs it.
2010
2011
-------------------------------------------------------------------
2012
Thu May  3 13:44:11 CEST 2007 - mmarek@suse.cz
2013
2014
- fixed some new compiler warnings
2015
2016
-------------------------------------------------------------------
2017
Thu May  3 08:25:46 UTC 2007 - judas_iscariote@shorewall.net
2018
2019
- upgrade to PHP 5.2.2, fixed hundreds of bugs including MOPB ones
2020
  if you need the complete changes see http://www.php.net/ChangeLog-5.php#5.2.2 
2021
2022
-------------------------------------------------------------------
2023
Thu May  3 04:47:57 UTC 2007 - judas_iscariote@shorewall.net
2024
2025
- Upgrade suhosin extension to version 0.9.19 see
2026
  http://www.hardened-php.net/suhosin/changelog.html for details
2027
2028
-------------------------------------------------------------------
2029
Fri Mar 30 11:34:29 CEST 2007 - mmarek@suse.de
2030
2031
- added bison to BuildRequires, removed update-desktop-files
2032
2033
-------------------------------------------------------------------
2034
Thu Mar 22 17:29:44 CET 2007 - mmarek@suse.de
2035
2036
- fixed unpack() on big-endian 64bit (revert-phpbug38770.patch)
2037
- blacklist more env variables when safe_mode is on
2038
  (php5-config.patch)
2039
2040
-------------------------------------------------------------------
2041
Sat Mar 17 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2042
2043
- fix Requires of -devel package to include only what is really
2044
  needed for operation of the pecl tool as well the neccesary
2045
  headers to compile php extensions.
2046
- Fix MOPB 24 "PHP array_user_key_compare() Double DTOR
2047
  Vulnerability"
2048
- note that fix for MOPB 23 was included in the previous patchset.
2049
2050
-------------------------------------------------------------------
2051
Wed Mar 14 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2052
2053
- add security fixes for MOPB 20, 21 and 22.
2054
- RPM_BUILD_ROOT is never defined in %post. 
2055
2056
-------------------------------------------------------------------
2057
Fri Mar 11 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2058
2059
- fix/workaround for php5-gd problem with typo3 [#236680]
2060
- add fix for MOPB-14-2007 PHP substr_compare() Information Leak
2061
  Vulnerability.
2062
- add secfix for import_request_variables() ancient problem, users
2063
  of suhosin extension are not affected.
2064
- Run the test suite here 
2065
2066
-------------------------------------------------------------------
2067
Tue Mar 06 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2068
2069
- Update suhosin extension to version 0.9.18 fixing a session
2070
  problem.
2071
2072
-------------------------------------------------------------------
2073
Mon Mar 05 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2074
2075
- Update suhosin extension to version 0.9.17. see 
2076
  http://www.hardened-php.net/suhosin/changelog.html for details.
2077
2078
-------------------------------------------------------------------
2079
Thu Feb 15 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2080
2081
- add t1lib support in php5-gd (10.3 and up only)
2082
- an off-by-one in str_replace may cause a crash.
2083
2084
-------------------------------------------------------------------
2085
Wed Feb 08 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2086
2087
- PHP 5.2.1. for a full list of changes see
2088
  http://www.php.net/ChangeLog-5.php#5.2.1
2089
- add Obsoletes for extensions we dont ship anymore
2090
2091
-------------------------------------------------------------------
2092
Fri Feb 02 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2093
2094
- fix getenv() modifing $_POST, breaks suhosin badly when
2095
  register_* is On and variables orde is "GPCS" (default).
2096
- change/remove obsoleted patches
2097
2098
-------------------------------------------------------------------
2099
Tue Jan 30 11:08:09 CET 2007 - anosek@suse.cz
2100
2101
- synced with BuildService
2102
  * file "session_mm_apache2handler0.sem" written at boot
2103
    [#229200] (php5-config.patch)
2104
  * for certain functionality php5-exif requires php5-mbstring
2105
  * php5-ldap requires php5-openssl
2106
  * remove LDAP_DEPRECATED from CFLAGS, module already
2107
    takes care of this.
2108
  * patch potential HTTP_SESSION_VARS et all hijack when
2109
    register_globals is On users from suhosin extension are
2110
    not affected.(php5-session-rgon-hijack.patch) 
2111
  * on 10.2 and up  php5-devel should require pcre-devel
2112
    sqlite-devel sqlite2-devel
2113
  * php5-devel is mostly useless without autoconf automake libtool
2114
    bison make gcc.
2115
  * added patches: phpbug-39350.patch
2116
                   oldhat-phpinputdata-secfix.patch
2117
                   ze2-fixes.patch
2118
                   filter.patch
2119
                   ext-lib64again.patch
2120
2121
-------------------------------------------------------------------
2122
Fri Jan 26 11:10:44 CET 2007 - mmarek@suse.cz
2123
2124
- fixed string comparison in xmlrpc module (strcmp.patch)
2125
- allways apply %%patch9 
2126
2127
-------------------------------------------------------------------
2128
Fri Jan 26 11:01:28 CET 2007 - mmarek@suse.cz
2129
2130
- updated the curl module from cvs to fix build with curl-7.16
2131
  (curl-cvs-fix.patch, dropped gcc.patch)
2132
2133
-------------------------------------------------------------------
2134
Tue Dec 19 14:19:28 CET 2006 - anosek@suse.cz
2135
2136
- fixed VUL-0: php session.save_path open_basedir bypass
2137
  [#227569] (save_path-secfix.patch) 
2138
2139
-------------------------------------------------------------------
2140
Wed Dec  6 16:42:52 CET 2006 - anosek@suse.cz
2141
2142
- synced with BuildService
2143
  * updated Suhosin patch to 0.9.6.2
2144
  * updated Suhosin extension to 0.9.16
2145
  * fixed php5-devel should provide PECL tool [#204006]
2146
  * use bundled sqlite in  suse versions =< 10.1
2147
    (pdo_sqlite stopped working properly with older sqlite3 libs)
2148
  * do not use zend-multibyte anymore, please refer
2149
    to phpbug #36711 and associated links, no applications uses
2150
    this feature in the real world since it is disabled
2151
    in all other distributions/OS.seems to cause more problems
2152
    than solutions.
2153
  * change php.ini, back to short_open_tag =off (the default)
2154
    the package that depended on this setting no longer does.
2155
    Also explicitely set the upload_tmp_dir in php.ini to deal
2156
    with open_basedir recent changes (please refer
2157
    to phpbug #39123) for the details.
2158
  * suhosin.ini uses just the default recommended settings
2159
2160
-------------------------------------------------------------------
2161
Wed Nov  8 15:15:43 CET 2006 - anosek@suse.cz
2162
2163
- created symlinks /usr/bin/php and /usr/bin/pear [#216166]
2164
2165
-------------------------------------------------------------------
2166
Tue Nov  7 11:47:40 CET 2006 - mmarek@suse.cz
2167
2168
- fixed implicit function decls in suhosin patch (keep the original
2169
  patch intact and put fixes into separate patch)
2170
2171
-------------------------------------------------------------------
2172
Mon Nov  6 10:15:34 CET 2006 - mmarek@suse.cz
2173
2174
- updated to 5.2.0 final
2175
- merged changes from buildservice (by soporte@onfocus.cl):
2176
  - updated suhosin to 0.9.10
2177
  - added suhosin patch
2178
  - build with system PCRE if suse_release > 10.1 only [#215610]
2179
  - suhosin extension does not require PDO
2180
  - suhosin added to the reccommended list
2181
  - php5-pspell to require at least aspell-en otherwise is useless
2182
    [#217272]
2183
2184
-------------------------------------------------------------------
2185
Thu Oct 26 12:13:16 CEST 2006 - anosek@suse.cz
2186
2187
- php5-sqlite now uses our sqlite and sqlite2 packages to build
2188
  and not bundled ones [#201440]
2189
- updated suhosin to 0.9.9
2190
2191
-------------------------------------------------------------------
2192
Fri Oct 20 17:04:34 CEST 2006 - nadvornik@suse.cz
2193
2194
- update to 5.2.0RC6
2195
2196
-------------------------------------------------------------------
2197
Fri Oct 20 00:12:12 CEST 2006 - postadal@suse.cz
2198
2199
- reset right path in extension_dir (php5-php-config.patch)
2200
2201
-------------------------------------------------------------------
2202
Mon Oct  9 17:53:27 CEST 2006 - postadal@suse.cz
2203
2204
- update to version 5.2.0RC5
2205
- added suhosin extension (the hardened php replacement) [#210886]
2206
2207
-------------------------------------------------------------------
2208
Sun Oct  8 10:17:53 CEST 2006 - postadal@suse.cz
2209
2210
- update to version 5.2.0RC4
2211
  * added DSA key generation support to openssl_pkey_new()
2212
  * updated PCRE to version 6.7
2213
  * increased default memory limit to 16 megabytes to accommodate for a more
2214
    accurate memory utilization measurement
2215
  * added support for httpOnly flag for session extension and cookie setting
2216
    functions
2217
  * added version specific registry keys to allow different configurations for
2218
    different php version
2219
  * added "PHPINIDir" Apache directive to apache and apache_hooks SAPIs
2220
  * added an optional boolean parameter to memory_get_usage() and 
2221
    memory_get_peak_usage() to get memory size allocated by emalloc() or real
2222
    size of memory allocated from system
2223
  * moved extensions to PECL (filepro and hwapi)
2224
  * improved SNMP, OpenSSL extension
2225
  * improved the Zend memory manager, FastCGI SAPI, CURL, PCRE, PDO, SPL,
2226
    xmlReader
2227
2228
- merged changes from openSUSE build service
2229
  * build without --enable-sigchild [#206533, php#28294, php#38342]
2230
  * build CLI with libedit support (really-with-libedit.patch)
2231
  * tweaked the default config a bit, to make it more secure
2232
  * removed ini entries related to extensions we don't ship
2233
  * t1lib is not currently needed for build, we need t1lib5 to do 
2234
    something useful
2235
  * removeed --enable-ucd-snmp-hack (needed for ucd-snmp, but we use net-snmp)
2236
  * pdo_odbc provided by php-odbc
2237
  * php-suse-addons :
2238
    o PHP5 is unlikely to parse php3 code, remove the file association
2239
    o corrected apache directive is AddHandler not AddType
2240
  * dropped extensions:
2241
    o mysql, mysqli and pdo_mysql provided by php-mysql (reduce package count)
2242
    o php-pdo_sqlite provided by php-sqlite
2243
    o php-pdo_pgsql provided by php-pgsql 
2244
    o filepro dropped by upstream
2245
  * new extension:
2246
    o filter (kept static and cannot be unloaded, due security reasons)
2247
    o json (added as Recommended)
2248
    o zip (it uses a bundled library)
2249
2250
- fixed gcc issues (gcc.patch)
2251
- droped obsoleted patches: include_path.patch, bug-37720.patch, 
2252
  bug-37306.patch, cgi_bugs.patch, bug-37587.patch, gd-fixes.patch,
2253
  bug-37416.patch, main_bugs.patch, soap.patch, standard.patch, 
2254
  mbstring_bugs.patch, ze2_bugs.patch, xsl_bugs.patch, curl.patch
2255
  
2256
-------------------------------------------------------------------
2257
Wed Aug 16 14:01:02 CEST 2006 - postadal@suse.cz
2258
2259
- fixed build with X11R7
2260
2261
-------------------------------------------------------------------
2262
Wed Jul 26 16:36:05 CEST 2006 - postadal@suse.cz
2263
2264
- updated to version 5.1.4
2265
  * FastCGI interface was completely reimplemented
2266
  * multitude of improvements to the SPL, SimpleXML, GD, CURL and 
2267
    Reflection extensions
2268
  * support for many additional date formats added to the strtotime()
2269
  * a performance improvements added to the engine and core extensions
2270
  * added imap_savebody() that allows message body to be written to a file
2271
  * added lchown() and lchgrp() to change user/group ownership of symlinks
2272
  * upgraded bundled PCRE library to version 6.6
2273
2274
- merged changes from openSUSE build service
2275
  * removed unneeded sablot-devel,sqlite-devel,pcre-devel,fam-devel 
2276
    and libmcal from BuildRequires
2277
  * added php-ctype,php-dom,php-iconv,php-pdo,php-pdo_sqlite,php-sqlite,
2278
    php-tokenizer,php-xmlreader,php-xmlwriter to Recommends
2279
  * added php-mbstring php-gd php-pear php-gettext php-mysqli to Suggests
2280
  * added support for optional readline(libedit) for CLI 
2281
    (disabled by default)
2282
  * patches for zendengine (ze2_bugs.patch), xsl (xsl_bugs.patch), 
2283
    curl (curl.patch) and mbstring bugs (mbstring_bugs.patch),
2284
    big soap patch (soap.patch)
2285
  * removed obsoleted patches 
2286
  * fixed Safe Mode Bypass [#188243] (standard.patch)
2287
  * upstream patches  
2288
    [php#37306, php#37416, php#37587, php#37720]
2289
    [php#37576, php#37496, php#37341, php#37313, php#37256] (cgi_bugs.patch)
2290
    [php#37346, php#37360] (gd-fixes.patch)
2291
  * fixed build inconsistences, added php-hash module [#173023]
2292
  * added pdo_odbc.so to php-odbc module [#190614]
2293
  * build without explicit safe_mode and magic_quotes (unneeded)
2294
  * removed useless GD --with-ttf configure option, only suitable 
2295
    for freetype 1
2296
  
2297
-------------------------------------------------------------------
2298
Fri Jun  9 12:54:47 CEST 2006 - poeml@suse.de
2299
2300
- fix BuildRequires to build on SUSE Linux 10.1, 10.0, 9.3
2301
- use the -fstack-protector compile switch only on 10.0 and newer
2302
2303
-------------------------------------------------------------------
2304
Thu May 11 12:55:32 CEST 2006 - postadal@suse.cz
2305
2306
- fixed memory leak in imagecreatefromgif() 
2307
  [#173451] (phpbug-37346.patch)
2308
- fixed possibility of a wrong element being deleted by zend_hash_del() 
2309
  [#175976] (zend_hash_del.patch)
2310
- fixed substr_compare() when offset equals string length 
2311
  [#169038, php#37394] (CVE-2006-1991, phpbug-37394.patch)
2312
- fixed _emalloc() on 64bit archs [#169038] (emalloc.patch)
2313
2314
-------------------------------------------------------------------
2315
Wed May  3 15:16:05 CEST 2006 - postadal@suse.cz
2316
2317
- fixed completely broken SplTempFileObject [php#37257] 
2318
  (phpbug-37257.patch)
2319
- fixed problem with with $_POST array [php#37276]
2320
  (phpbug-37276.patch)
2321
2322
-------------------------------------------------------------------
2323
Wed Apr 12 15:24:24 CEST 2006 - postadal@suse.cz
2324
2325
- fixed security problem in copy() and tempname() 
2326
  [#164845] (CVE-2006-1494-1608.patch)
2327
- fixed phpinfo() XSS [#164804] (CVE-2006-0996.patch)
2328
- fixed memory leak in html_entity_decode  [#161718] (CVE-2006-1490.patch)
2329
- fixed multiple imap safemode and open_basedir restriction bypass
2330
  [#154317] (CVE-2006-1017.patch)
2331
2332
-------------------------------------------------------------------
2333
Mon Mar 27 17:39:43 CEST 2006 - postadal@suse.cz
2334
2335
- fixed buffer overrun in ftp_fopen_wrapper (ftp_fopen_wrapper.patch)
2336
2337
-------------------------------------------------------------------
2338
Tue Mar 14 11:44:04 CET 2006 - postadal@suse.cz
2339
2340
- added updating APACHE_MODULES in /etc/sysconfig/apache2 [#155333]
2341
- added forgotten regenerated sources for (parse_date.patch and
2342
  phpbug-36459.patch)
2343
- fixed upstream bugs:
2344
    [php#36420] (phpbug-36420)
2345
      - segfault when access result->num_rows after calling result->close()
2346
    (mysqli-64bit.patch)
2347
      - fixed a 64-bit problem
2348
2349
-------------------------------------------------------------------
2350
Fri Mar  3 14:13:14 CET 2006 - postadal@suse.cz
2351
2352
- fixed a possible null injection in mbstring (mbstring-null_injection.patch)
2353
- fixed upstream bugs:
2354
    [mysql#16144] (phpbug-16144)
2355
      - fix for MySQL 5.1 (mysql_stmt_attr_get)
2356
    [php#36656] (phpbug-36656)
2357
      - http_build_query generates invalid URIs due to use of square brackets
2358
    [php#36396,36510,36510,36638] (parse_date.patch)
2359
      - fixed few bugs in date/time parsing
2360
    (string.patch)
2361
      - added overflow checks to wordwrap() function
2362
    [php#36459] (phpbug-36459)
2363
      - incorrect adding PHPSESSID to links, which contains \r\n
2364
2365
-------------------------------------------------------------------
2366
Fri Mar  3 14:13:13 CET 2006 - postadal@suse.cz
2367
2368
- added php5-openssl to php5-ftp Requires [#154273]
2369
- added safe_mode num of parameter check for mb_send_mail [#154315]
2370
2371
-------------------------------------------------------------------
2372
Fri Feb 10 19:32:13 CET 2006 - postadal@suse.cz
2373
2374
- fixed upstream bugs:
2375
   [php#36306] (phpbug-36306.patch) 
2376
     - fixed crc32() for 64bit arch
2377
   [php#36351] (phpbug-36351.patch)
2378
     - parse_url() did not parse numeric paths properly
2379
   (spl_directory.patch)
2380
   [php#35998]
2381
     - getPathname() method always returns unix style filenames
2382
   [php#36134]
2383
     - DirectoryIterator constructor failed to detect empty directory names
2384
   [php#36258]
2385
     -  SplFileObject::getPath() may lead to segfault
2386
   [php#36287]
2387
   [php#36295]
2388
   [php#36359]
2389
     - splFileObject::fwrite() doesn't write when no data length specified
2390
   (session2.patch)
2391
     - fixed logic, if the client already sent us the cookie, we don't
2392
       need to send it again
2393
   (soap.patch) [php#36226, php#36083, php#36283]
2394
   (math.patch, simplexml.patch, mbstring.patch, zend_operators.patch, xp_socket.patch)
2395
     - initialize variables
2396
2397
-------------------------------------------------------------------
2398
Sat Feb  4 16:51:18 CET 2006 - postadal@suse.cz
2399
2400
- removed gd-devel from BuildRequires (better used bundled modified gd lib)
2401
- fixed upstream bugs:
2402
   [php#36268] (phpbug-36268.patch) 
2403
   [php#36148] (phpbug-36148.patch) 
2404
   [php#36185] (phpbug-36185.patch) 
2405
   [php#36208] (phpbug-36208.patch) 
2406
   [php#36158] (phpbug-36158.patch) 
2407
2408
-------------------------------------------------------------------
2409
Tue Jan 31 14:08:55 CET 2006 - postadal@suse.cz
2410
2411
- reverted default value for short_open_tag to On [#145895]
2412
2413
-------------------------------------------------------------------
2414
Mon Jan 30 18:05:13 CET 2006 - postadal@suse.cz
2415
2416
-  fixed upstream bugs:
2417
   [php#36176] (phpbug-36176.patch)
2418
   (pdo.patch) 
2419
    - properly rewrite queries where a bound parameter appears more then once
2420
    
2421
-------------------------------------------------------------------
2422
Mon Jan 30 13:59:35 CET 2006 - poeml@suse.de
2423
2424
- removed libapr-util1-devel from BuildRequires (apache2-devel does
2425
  require it)
2426
2427
-------------------------------------------------------------------
2428
Wed Jan 25 21:40:11 CET 2006 - mls@suse.de
2429
2430
- converted neededforbuild to BuildRequires
2431
2432
-------------------------------------------------------------------
2433
Tue Jan 24 16:03:31 CET 2006 - postadal@suse.cz
2434
2435
- added php5-pdo to requires for pdo_mysql, pdo_pgsql, pdo_sqlite and 
2436
  sqlite and php5-dom to requires for xmlreader and xsl [#144360]
2437
- revert name of extensions (appended suffix .so) [#143552]
2438
- removed _FILE_OFFSET_BITS=64 and _LARGEFILE_SOURCE from CFLAGS 
2439
  (doesn't work with apache2 configuration, which uses libapr with 
2440
  native support for large files) [#144362]
2441
- added -fstack-protector
2442
2443
-------------------------------------------------------------------
2444
Mon Jan 23 17:28:34 CET 2006 - postadal@suse.cz
2445
2446
- added forgoted extension xmlwrite
2447
- gave back simple dot to include_path [#129682]
2448
- fixed upstream bugs:
2449
  [php#36071] (phpbug-36011.patch)
2450
  [php#36016] (phpbug-36016.patch)
2451
    - realpath cache memleaks
2452
  [php#36071] (phpbug-36071.patch) 
2453
    - Zend engine crash related with 'clone' 
2454
  (zend-fix.patch) 
2455
    - fix issues with static method invocation 
2456
    - ce_child is properly initialized
2457
  [php#36046] (phpbug-36046.patch) 
2458
    - parse_ini_file() miscounts lines in multi-line values
2459
  [php#36037] (phpbug-36037.patch)
2460
    - heredoc adds extra line number
2461
  [php#36006] (phpbug-36006.patch)
2462
    - problem with $this in __destruct()
2463
  (gd.patch)
2464
    - improve open_basedir checks in GD
2465
  [php#36007] (phpbug-36007.patch)
2466
    - added new mysqli constants for BIT and NEW_DECIMAL field types (for mysql 5)
2467
  (session.patch)
2468
    - check for special characters in the session name
2469
  (xmlreader.patch)
2470
    - 64bit fixes
2471
2472
-------------------------------------------------------------------
2473
Thu Jan 19 17:41:37 CET 2006 - postadal@suse.cz
2474
2475
- disable discard-path for fastcgi binary [#143564]
2476
2477
-------------------------------------------------------------------
2478
Wed Jan 18 22:15:00 CET 2006 - postadal@suse.cz
2479
2480
- updated to version 5.1.2
2481
- removed obsoleted patches: CAN-2005-1042_1043.patch, CVE-2005-3353.patch,
2482
  openssl.patch, soap.patch, pdo.patch, simplexml.patch, curl.patch,
2483
  ze.patch
2484
- added pdo, pdo_mysql, pdo_pgsql, pdo_sqlite extensions
2485
2486
-------------------------------------------------------------------
2487
Tue Jan 17 19:30:45 CET 2006 - mrueckert@suse.de
2488
2489
- remove apache2-mod_fastcgi from nfb it seems to be unused
2490
2491
-------------------------------------------------------------------
2492
Sat Jan 14 18:50:37 CET 2006 - kukuk@suse.de
2493
2494
- Add gmp-devel to nfb
2495
2496
-------------------------------------------------------------------
2497
Tue Jan 10 01:59:39 CET 2006 - ro@suse.de
2498
2499
- avoid rpath /usr/ssl/lib in curl ext
2500
2501
-------------------------------------------------------------------
2502
Wed Jan  4 15:16:03 CET 2006 - postadal@suse.cz
2503
2504
- updated to version 5.1.1 [#135635, #139297]
2505
- removed obsoleted patches: php5-with_lib.patch, soap.patch, posix.patch,
2506
  gcc4.patch, save_path-segfault.patch, basedir-fix.patch, 
2507
  RPC-CAN-2005-1921.patch, RPC-CAN-2005-2498.patch, pcre-overflow-bug-106209.patch,
2508
  CVE-2005-3388.patch, CVE-2005-3389.patch, CVE-2005-3390.patch, 
2509
  mod_rewrite-fix.patch, mbstring.patch, CVE-2005-3391.patch, CVE-2005-3392.patch,
2510
  errordocument-fix.patch
2511
- removed sqlite2 from build dependencies and added libtidy libtidy-devel
2512
- removed dbx, fam, yp, dio extensions (upstream deprecated)
2513
- added dba, tidy and xmlreader extensions
2514
- renamed libphp5.so -> mod_php5.so (need it for yast module)
2515
- added upstream patches:
2516
  openssl.patch [php#35381]
2517
  soap.patch [php#35399]
2518
  pdo.patch [php#35431, php#35430]
2519
  simplexml.patch [php#35028]
2520
  curl.patch [php#35908]
2521
  ze.patch [php#35393]
2522
- updated pear sources install-pear-nozlib.phar
2523
- package CLI instad CGI binaries [#137443]
2524
- reverted last changes (problem caused curl-devel package)
2525
2526
-------------------------------------------------------------------
2527
Thu Dec 15 11:19:59 CET 2005 - mmarek@suse.cz
2528
2529
- provide php-pear in php5-pear
2530
- add /usr/share/php5/PEAR to include path
2531
2532
-------------------------------------------------------------------
2533
Tue Dec  6 23:54:12 CET 2005 - postadal@suse.cz
2534
2535
- fixed [php#33987] bug (php script as ErrorDocument causes crash
2536
  in Apache 2).
2537
2538
-------------------------------------------------------------------
2539
Mon Dec  5 14:54:25 CET 2005 - postadal@suse.cz
2540
2541
- fixed unexpected header can be injected to mb_send_mail()
2542
  [#135673] (mbstring.patch)
2543
- added safe_mode checks for image* functions and cURL
2544
  [#135673] (CVE-2005-3391.patch)
2545
- fixed possible INI setting leak via virtual() in Apache 2 sapi
2546
  [#135673] (CVE-2005-3392.patch)
2547
2548
-------------------------------------------------------------------
2549
Tue Nov 29 17:31:28 CET 2005 - mmarek@suse.cz
2550
2551
- build with flex-old until upstream fixes build with flex-2.5.31
2552
2553
-------------------------------------------------------------------
2554
Mon Nov 28 16:36:21 CET 2005 - postadal@suse.cz
2555
2556
- fixed CVE-2005-3388.patch [#131578]
2557
2558
-------------------------------------------------------------------
2559
Fri Nov 25 15:55:34 CET 2005 - postadal@suse.cz
2560
2561
- fixed segfaulting with mod_rewrite [#135480] (mod_rewrite-fix.patch)
2562
2563
-------------------------------------------------------------------
2564
Tue Nov 22 14:30:27 CET 2005 - uli@suse.de
2565
2566
- define ARM FP(A) endianness correctly
2567
2568
-------------------------------------------------------------------
2569
Tue Nov 15 15:44:00 CET 2005 - mmarek@suse.cz
2570
2571
- fixed infinite recursion in exif code
2572
  [#132684] (CVE-2005-3353.patch)
2573
- fixed XSS in phpinfo()
2574
  [#131578] (CVE-2005-3388.patch)
2575
- fixed register_globals actvation in parse_str()
2576
  [#131579] (CVE-2005-3389.patch)
2577
- fixed possible $GLOBALS overwrite
2578
  [#131580] (CVE-2005-3390.patch)
2579
- fixed handling basedirs that end with a / 
2580
  [#118976] (basedir-fix.patch)
2581
- fixed segfaulting when save_path is set and safe_mode is On
2582
  [#130227] (save_path-segfault.patch)
2583
2584
-------------------------------------------------------------------
2585
Tue Oct 25 14:32:09 CEST 2005 - rhafer@suse.de
2586
2587
- added LDAP_DEPRECATED to CFLAGS to build correctly with
2588
  OpenLDAP 2.3
2589
2590
-------------------------------------------------------------------
2591
Fri Oct 14 16:02:56 CEST 2005 - postadal@suse.cz
2592
2593
- fixed recode extension [#120087] (recode-fix.patch)
2594
- enabled _GNU_SOURCE for compiling
2595
2596
-------------------------------------------------------------------
2597
Wed Oct 12 14:00:59 CEST 2005 - postadal@suse.cz
2598
2599
- fixed implicit declaration (gcc4.patch)
2600
2601
-------------------------------------------------------------------
2602
Mon Oct 10 16:15:05 CEST 2005 - postadal@suse.cz
2603
2604
- fixed uninitialized variables (gcc4.patch)
2605
2606
-------------------------------------------------------------------
2607
Thu Sep  1 15:58:30 CEST 2005 - postadal@suse.cz
2608
2609
- added security patch pcre-overflow-bug-106209.patch for internal 
2610
  libpcre and statically linked against it [#114157]
2611
- added include_path = "/usr/share/php" to php.ini [#114406]
2612
2613
-------------------------------------------------------------------
2614
Thu Aug 25 14:15:14 CEST 2005 - postadal@suse.cz
2615
2616
- linked with system pcre libs (pcre-fix.patch) [#112645]
2617
2618
-------------------------------------------------------------------
2619
Thu Aug 18 17:28:55 CEST 2005 - postadal@suse.cz
2620
2621
- fixed XML RPC command injection 
2622
  (#94579, CAN-2005-192 and #104403, CAN-2005-2498)
2623
2624
-------------------------------------------------------------------
2625
Tue Aug  9 16:36:01 CEST 2005 - mls@suse.de
2626
2627
- removed compat from neededforbuild
2628
2629
-------------------------------------------------------------------
2630
Tue Aug  2 14:20:37 CEST 2005 - tcrhak@suse.cz
2631
2632
- dropped php4-dba and php4-readline due to license problems (bug #91489)
2633
- compile without -DPHP_AP_DEBUG (bug #95502)
2634
- fixed php-config to return a correct includes path (patch php5-php-config)
2635
- fixed a sigsegv in the soap extension (bug #99268, patch php5-soap)
2636
2637
-------------------------------------------------------------------
2638
Mon Apr 25 11:42:25 CEST 2005 - mcihar@suse.cz
2639
2640
- added pspell subpackages
2641
2642
-------------------------------------------------------------------
2643
Tue Apr 19 12:30:40 CEST 2005 - mcihar@suse.de
2644
2645
- update tarball to rereleased one which contains missing file
2646
2647
-------------------------------------------------------------------
2648
Sat Apr  9 10:54:19 CEST 2005 - aj@suse.de
2649
2650
- Compile with GCC4.
2651
2652
-------------------------------------------------------------------
2653
Mon Apr  4 14:09:45 CEST 2005 - mcihar@suse.cz
2654
2655
- update to 5.0.4
2656
- drop patches merged upstream
2657
- add RunTests.php missing from upstream tarball
2658
2659
-------------------------------------------------------------------
2660
Thu Mar 17 17:45:39 CET 2005 - mcihar@suse.cz
2661
2662
- fix path to configuration files
2663
2664
-------------------------------------------------------------------
2665
Mon Mar 14 16:14:42 CET 2005 - mcihar@suse.cz
2666
2667
- do not build CLI with all GCI stuff
2668
- fix build when extensions are built as *.so instead of just *
2669
- use different php.ini for each SAPI, this is needed for giving CLI more space to live (bug #72311)
2670
2671
-------------------------------------------------------------------
2672
Wed Mar  9 16:39:33 CET 2005 - mcihar@suse.cz
2673
2674
- provide compiled in modules
2675
2676
-------------------------------------------------------------------
2677
Mon Mar  7 13:20:02 CET 2005 - mcihar@suse.cz
2678
2679
- fix path to php5 binary in pear5 script (bug #71044)
2680
2681
-------------------------------------------------------------------
2682
Thu Mar  3 18:01:29 CET 2005 - mcihar@suse.de
2683
2684
- realy enable xml module
2685
2686
-------------------------------------------------------------------
2687
Tue Mar  1 11:38:31 CET 2005 - mcihar@suse.cz
2688
2689
- provide only mod_php_any in apache module (bug #66729)
2690
2691
-------------------------------------------------------------------
2692
Mon Feb 21 15:02:04 CET 2005 - mcihar@suse.cz
2693
2694
- fix some compile time warnings
2695
2696
-------------------------------------------------------------------
2697
Thu Feb 10 15:24:02 CET 2005 - mcihar@suse.cz
2698
2699
- add zlib dependency to pear (bug #50697)
2700
2701
-------------------------------------------------------------------
2702
Wed Feb  9 15:52:45 CET 2005 - mcihar@suse.cz
2703
2704
- use correct path to apache2_MMN
2705
- comment some patches
2706
- update README.SUSE
2707
- drop unused sce_install
2708
- each extension now provides also unversioned symbol, to allow not to depend
2709
  on specific php version
2710
- drop MIME type change as both php modules don't work together anyway
2711
2712
-------------------------------------------------------------------
2713
Tue Feb  8 15:16:51 CET 2005 - mcihar@suse.cz
2714
2715
- drop actually unused patches
2716
- fix build on ia64 (endians patch, stolen from cvs) (still doesn't build due to missing current MySQL)
2717
- fix build on lib64 machines
2718
2719
-------------------------------------------------------------------
2720
Mon Feb  7 17:48:22 CET 2005 - mcihar@suse.cz
2721
2722
- initial packaging of php5
2723
- suse addons are now in tarball instead of patch
2724
- reorganize patches
2725
- simplified build system
2726
2727
-------------------------------------------------------------------
2728
Wed Jan 26 17:24:48 CET 2005 - mcihar@suse.cz
2729
2730
- update asp2php
2731
- drop lynx from buildrequires
2732
2733
-------------------------------------------------------------------
2734
Tue Jan 11 17:48:38 CET 2005 - mcihar@suse.cz
2735
2736
- fix broken int unserializing on 64-bit (bug #49617)
2737
2738
-------------------------------------------------------------------
2739
Fri Dec 17 17:53:37 CET 2004 - poeml@suse.de
2740
2741
- update to 4.3.10
2742
- for apache module, pick up CFLAGS from apxs [#49356]
2743
- drop obsolete php-4.3.9RC3.diff
2744
- update lib64.diff
2745
- fix return type in php_sprintf()
2746
- don't apply php-4.3.8-snmp.diff
2747
- do not clean buildroot in buildsystem to facilitate debugging
2748
- fix PreRequires (sce_install_path) [#46664]
2749
2750
-------------------------------------------------------------------
2751
Thu Nov 18 15:40:36 CET 2004 - ro@suse.de
2752
2753
- use kerberos-devel-packages 
2754
2755
-------------------------------------------------------------------
2756
Thu Nov  4 16:07:12 CET 2004 - ro@suse.de
2757
2758
- added rpm-devel,popt-devel,tcpd,tcpd-devel to neededforbuild (for snmp)
2759
2760
-------------------------------------------------------------------
2761
Tue Oct 05 13:09:59 CEST 2004 - pmladek@suse.cz
2762
2763
- added /usr/lib/php/sce_install to prerequires of php4-swf; it is in the
2764
  package php4-32bit on x86_64 [#46475]
2765
2766
-------------------------------------------------------------------
2767
Thu Sep 23 20:21:17 CEST 2004 - tcrhak@suse.cz
2768
2769
- security fix for array parsing (bug #45710) and
2770
  some other fixes from php-4.3.9RC3 (patch 4.3.9RC3)
2771
- removed the #%endif causing syntax error during /usr/lib/php/sce_install (bug #45589)
2772
- /var/lib/php is now owned by wwwrun (bug #45360)
2773
- reverted dlopen flag back to RTLD_GLOBAL (bugs #39197 and #41866),
2774
  php4-recode now conflicts with php4-imap, php4-mysql and apache2-mod_auth_mysql,
2775
  mod_php4-core does not require php4-recode any more
2776
- dropped php4-dba and php4-readline due to license poblems (bug #45654)
2777
2778
-------------------------------------------------------------------
2779
Fri Sep 17 16:02:17 CEST 2004 - tcrhak@suse.cz
2780
2781
- added tomcat5 to the Requires of php4-servlet
2782
2783
-------------------------------------------------------------------
2784
Wed Sep 15 13:47:36 CEST 2004 - tcrhak@suse.cz
2785
2786
- removed the build dependency on tomcat5
2787
- added tomcat5 directories to filelist
2788
- enabled iconv for the other archs
2789
2790
-------------------------------------------------------------------
2791
Tue Sep 14 16:50:54 CEST 2004 - skh@suse.de
2792
2793
- use new JPackage packages tomcat5 and servletapi5 to build
2794
2795
-------------------------------------------------------------------
2796
Fri Sep 10 15:58:26 CEST 2004 - tcrhak@suse.cz
2797
2798
- do not source setJava
2799
2800
-------------------------------------------------------------------
2801
Fri Sep 03 15:16:42 CEST 2004 - tcrhak@suse.cz
2802
2803
- update to 4.3.8
2804
- added module dbx (bug #43972)
2805
- use system gd library, includes "GIF Create Support" (bug #44001)
2806
- disallow persistant connections by default (bug #34849)
2807
- use /var/lib/php for php sessions by default (bug #36886)
2808
- php modules need to prereq sce_install (bug #43994)
2809
2810
-------------------------------------------------------------------
2811
Thu Aug 19 16:52:42 CEST 2004 - aj@suse.de
2812
2813
- Remove broken cat commands from post section:
2814
  * no requires for them
2815
  * no need to execute them
2816
2817
-------------------------------------------------------------------
2818
Mon Aug 16 14:18:01 CEST 2004 - ro@suse.de
2819
2820
- fix build with updated libcurl: use current instead of
2821
  deprecated type for curl_httppost
2822
2823
-------------------------------------------------------------------
2824
Tue Jun  8 15:39:32 CEST 2004 - ro@suse.de
2825
2826
- removed mod_dav from neededforbuild
2827
- removed mod_php4 package (mod_php4-core is probably obsolete too)
2828
2829
-------------------------------------------------------------------
2830
Tue May 04 13:10:24 CEST 2004 - tcrhak@suse.cz
2831
2832
- build with postfix instead of sendmail
2833
2834
-------------------------------------------------------------------
2835
Thu Apr 29 23:58:25 CEST 2004 - ro@suse.de
2836
2837
- remove apache1 related parts
2838
2839
-------------------------------------------------------------------
2840
Fri Apr 23 13:54:49 CEST 2004 - tcrhak@suse.cz
2841
2842
- added sendmail to neededforbuild, so that mail() is defined (bug #39153)
2843
- dlopen php modules with RTLD_LOCAL (fixes bug #39197)
2844
2845
-------------------------------------------------------------------
2846
Wed Mar 31 09:13:21 CEST 2004 - tcrhak@suse.cz
2847
2848
- added php module recode (bug #36573)
2849
- fixed requires of mod_php4-apache2 (bug #37041)
2850
2851
-------------------------------------------------------------------
2852
Mon Mar 22 22:40:01 CET 2004 - ro@suse.de
2853
2854
- build-fix for jakarta-tomcat from skh
2855
- removed apache-contrib from neededforbuild (dropped)
2856
2857
-------------------------------------------------------------------
2858
Tue Mar 16 12:03:36 CET 2004 - tcrhak@suse.cz
2859
2860
- removed --enable-versioning (fixes bug #35716)
2861
- do not build servlet for ia64, ppc and ppc64
2862
2863
-------------------------------------------------------------------
2864
Fri Mar 05 16:20:39 CET 2004 - tcrhak@suse.cz
2865
2866
- modularized
2867
- updated to version 4.3.4
2868
- added fastcgi
2869
- added PHP4 module sockets
2870
- added PHP4 module mime_magic (bug #34134)
2871
- php binary is now CLI, not CGI (bug #34152)
2872
2873
-------------------------------------------------------------------
2874
Wed Feb 18 14:57:33 CET 2004 - ro@suse.de
2875
2876
- use jakarta-tomcat4
2877
2878
-------------------------------------------------------------------
2879
Mon Feb 16 01:02:49 CET 2004 - ro@suse.de
2880
2881
- use unixODBC instead of iodbc
2882
2883
-------------------------------------------------------------------
2884
Tue Feb 10 23:51:35 CET 2004 - poeml@suse.de
2885
2886
- fix symbol exports for apache2
2887
- add -fno-strict-aliasing to CFLAGS, due to code where
2888
  dereferencing type-punned pointers would break strict aliasing
2889
- fix test load of apache2 module (the LoadModule statement went
2890
  into the wrong place)
2891
2892
-------------------------------------------------------------------
2893
Sun Feb  8 20:43:46 CET 2004 - schwab@suse.de
2894
2895
- Fix symbol exports.
2896
- Also look for BEAJava2 directory.
2897
- Fix quoting.
2898
2899
-------------------------------------------------------------------
2900
Thu Jan 22 01:33:57 CET 2004 - ro@suse.de
2901
2902
- fix build with current automake
2903
2904
-------------------------------------------------------------------
2905
Fri Jan 16 12:57:14 CET 2004 - kukuk@suse.de
2906
2907
- Add pam-devel to neededforbuild
2908
2909
-------------------------------------------------------------------
2910
Tue Jan 13 16:28:22 CET 2004 - ro@suse.de
2911
2912
- remove subpackage aolserver
2913
- fix build with current freetype
2914
2915
-------------------------------------------------------------------
2916
Mon Nov 10 15:55:51 CET 2003 - ro@suse.de
2917
2918
- use net-snmp instead of ucdsnmp 
2919
2920
-------------------------------------------------------------------
2921
Thu Oct 30 09:04:02 CET 2003 - tcrhak@suse.cz
2922
2923
- ad previous fix: create the directory
2924
2925
-------------------------------------------------------------------
2926
Wed Oct 29 17:12:34 CET 2003 - tcrhak@suse.cz
2927
2928
- added %{_libdir}/php/bin to file list of mod_php4-core
2929
2930
-------------------------------------------------------------------
2931
Mon Sep 22 18:11:58 CEST 2003 - mls@suse.de
2932
2933
- remove 'Obsoletes: mod_php' from mod_php4, otherwise rpmv4
2934
  makes mod_php4 conflict with apache2-mod_php4
2935
2936
-------------------------------------------------------------------
2937
Tue Sep 16 15:22:13 CEST 2003 - tcrhak@suse.cz
2938
2939
- update to version 4.3.3
2940
2941
-------------------------------------------------------------------
2942
Mon Sep 01 19:52:02 CEST 2003 - tcrhak@suse.cz
2943
2944
- expand rpm macros in /etc/httpd/modules/mod_php4 [bug #29664]
2945
2946
-------------------------------------------------------------------
2947
Thu Aug 21 19:48:24 CEST 2003 - tcrhak@suse.cz
2948
2949
- update to version 4.3.2
2950
- use BuildRoot
2951
- added activation metadata to sysconfig [bug #28827]
2952
2953
-------------------------------------------------------------------
2954
Mon Aug 18 14:16:11 CEST 2003 - poeml@suse.de
2955
2956
- add README.{SuSE,UnitedLinux} [#25888]
2957
- don't explicitely strip binary objects, because RPM does it
2958
  anyway, and it might keep the stripped debugging info somewhere.
2959
- don't try to install a file in /etc/apache2/modules/ (it's gone)
2960
2961
-------------------------------------------------------------------
2962
Mon Jun 30 12:14:50 CEST 2003 - ro@suse.de
2963
2964
- always use libtool to compile objects
2965
- added directories to filelist 
2966
2967
-------------------------------------------------------------------
2968
Thu Apr 10 12:58:19 CEST 2003 - tcrhak@suse.cz
2969
2970
- use 'head -n 1' instead of 'head -1'
2971
- added mhash support
2972
2973
-------------------------------------------------------------------
2974
Wed Mar 26 19:28:31 CET 2003 - tcrhak@suse.cz
2975
2976
- fixed path in script phpize
2977
- fixed ext/mysql/config.m4
2978
2979
-------------------------------------------------------------------
2980
Thu Mar 13 16:46:58 CET 2003 - tcrhak@suse.cz
2981
2982
- fixed order of Type and Define in sysconfig metadata
2983
- readded subpackage servlet (patch servlet)
2984
- reenabled support for swf
2985
- install swf fonts, use proper SWFFONTPATH
2986
  (bug #18057, patch swf)
2987
2988
-------------------------------------------------------------------
2989
Tue Mar  4 16:42:57 CET 2003 - poeml@suse.de
2990
2991
- the apache2 module requires the apache2-prefork MPM
2992
2993
-------------------------------------------------------------------
2994
Thu Feb 20 14:39:51 CET 2003 - tcrhak@suse.cz
2995
2996
- security update to version 4.3.1 - fixes a CGI vulnerability
2997
- added sysconfig metadata [bug #22604]
2998
2999
-------------------------------------------------------------------
3000
Fri Feb 14 13:46:32 CET 2003 - tcrhak@suse.cz
3001
3002
- added php3, php4 to DirectoryIndex [bug #22066]
3003
3004
-------------------------------------------------------------------
3005
Thu Feb 13 23:40:55 CET 2003 - ro@suse.de
3006
3007
- really disable (empty) subpackage servlet 
3008
3009
-------------------------------------------------------------------
3010
Wed Feb 12 15:03:09 CET 2003 - poeml@suse.de
3011
3012
- rename subpackage mod_php4_2 to apache2-mod_php4
3013
3014
-------------------------------------------------------------------
3015
Tue Feb 11 14:23:10 CET 2003 - poeml@suse.de
3016
3017
- call the new /usr/share/apache2/get_module_list script to
3018
  configure apache2, so the test can be passed
3019
3020
-------------------------------------------------------------------
3021
Wed Jan 15 16:28:35 CET 2003 - ro@suse.de
3022
3023
- use sasl2 
3024
3025
-------------------------------------------------------------------
3026
Fri Jan 10 15:50:43 CET 2003 - poeml@suse.de
3027
3028
- don't built -servlet for now, needs work
3029
- swf.h has vanished from ./dist/include/, and I can't find another
3030
  one --> disabling swf support
3031
3032
-------------------------------------------------------------------
3033
Thu Jan  9 01:52:13 CET 2003 - poeml@suse.de
3034
3035
- update to 4.3.0
3036
  - GD library is now bundled with the distribution and it is
3037
    recommended to always use the bundled version
3038
  - vpopmail and cybermut extensions are moved to PECL
3039
  - several deprecated extensions (aspell, ccvs, cybercash, icap)
3040
    and SAPIs (fastcgi, fhttpd) are removed
3041
  - speed improvements in a variety of string functions
3042
  - Apache2 filter is improved, but is still considered
3043
    experimental (use with PHP in prefork and not worker (thread)
3044
    model since many extensions based on external libraries are not
3045
    thread safe)
3046
  - various security fixes (imap, mysql, mcrypt, file upload, gd, etc)
3047
  - new SAPI for embedding PHP in other applications (experimental)
3048
  - much better test suite
3049
  - significant improvements in dba, gd, pcntl, sybase, and xslt
3050
    extensions
3051
  - debug_backtrace() should help with debugging
3052
  - error messages now contain URLs linking to pages describing the
3053
    error or function in question
3054
  - Zend Engine has some fixes and minor performance enhancements
3055
  - and TONS of other fixes, updates, new functions, etc
3056
- build apache2 module
3057
- QtDOM support is now in qt3, and therefore we need to link
3058
  against libqt-mt
3059
- merge the lib64 patch, hope it's complete
3060
- gd lib is now bundled, and preferred for building
3061
- adjust the Provides of the -core package
3062
3063
-------------------------------------------------------------------
3064
Thu Nov 21 18:35:27 CET 2002 - ro@suse.de
3065
3066
- make it build with current automake 
3067
3068
-------------------------------------------------------------------
3069
Wed Oct 16 18:54:17 CEST 2002 - tcrhak@suse.cz
3070
3071
- added support for readline
3072
- added support for iconv and mbstrings [bugs #19861 and #19862]
3073
3074
-------------------------------------------------------------------
3075
Fri Sep 27 20:04:33 CEST 2002 - tcrhak@suse.cz
3076
3077
- added type .php3 to apache mod_php4.conf
3078
3079
-------------------------------------------------------------------
3080
Wed Sep 18 01:50:00 CEST 2002 - ro@suse.de
3081
3082
- removed bogus self-provides 
3083
3084
-------------------------------------------------------------------
3085
Tue Sep 03 22:47:14 CEST 2002 - tcrhak@suse.cz
3086
3087
- fixed to build on 64 bit archs
3088
3089
-------------------------------------------------------------------
3090
Fri Aug 23 17:25:57 CEST 2002 - tcrhak@suse.cz
3091
3092
- fixed to build on non-i386 archs
3093
- added dynamic extensions to the file list of subpackage core
3094
3095
-------------------------------------------------------------------
3096
Tue Aug 20 11:07:14 CEST 2002 - tcrhak@suse.cz
3097
3098
- added PreReq
3099
3100
-------------------------------------------------------------------
3101
Tue Aug 13 21:44:12 CEST 2002 - kukuk@suse.de
3102
3103
- Remove unused qt2 from neededforbuild
3104
3105
-------------------------------------------------------------------
3106
Wed Aug  7 17:26:24 CEST 2002 - uli@suse.de
3107
3108
- fixed to build on lib64 archs (still broken on nearly all archs
3109
  due to other problems)
3110
3111
-------------------------------------------------------------------
3112
Mon Aug  5 11:54:12 CEST 2002 - ro@suse.de
3113
3114
- use "-follow" when searching for jni.h 
3115
3116
-------------------------------------------------------------------
3117
Sun Jul 28 08:49:53 CEST 2002 - kukuk@suse.de
3118
3119
- remove unused gdb from neededforbuild
3120
3121
-------------------------------------------------------------------
3122
Sat Jul 27 13:52:07 CEST 2002 - adrian@suse.de
3123
3124
- fix neededforbuild
3125
3126
-------------------------------------------------------------------
3127
Fri Jul 26 11:42:15 CEST 2002 - kukuk@suse.de
3128
3129
- Add imap-lib to neededforbuild
3130
3131
-------------------------------------------------------------------
3132
Tue Jul 23 15:53:20 CEST 2002 - tcrhak@suse.cz
3133
3134
- update to version 4.2.2
3135
- update of asp2php to version 0.76.12
3136
- detect the module magic number if provided by apache, indicating 
3137
  API changes, and add an RPM Require on it
3138
- add compiled extensions (currently gd.so, as it is build shared
3139
  by a previous change by bk@suse.de) to php.ini and filelist
3140
3141
-------------------------------------------------------------------
3142
Fri Jul  5 10:43:32 CEST 2002 - kukuk@suse.de
3143
3144
- Use %ix86 macro
3145
3146
-------------------------------------------------------------------
3147
Tue May 28 02:09:57 CEST 2002 - ro@suse.de
3148
3149
- replaced /opt/jakarta with /opt/jakarta/tomcat 
3150
3151
-------------------------------------------------------------------
3152
Mon May 27 18:19:38 CEST 2002 - ro@suse.de
3153
3154
- first try for lib64 
3155
3156
-------------------------------------------------------------------
3157
Mon May 27 16:25:28 CEST 2002 - bk@suse.de
3158
3159
- use shared libgd on all archs
3160
3161
-------------------------------------------------------------------
3162
Sat Mar 23 09:59:10 CET 2002 - ro@suse.de
3163
3164
- removed unixODBC stuff, was never used (iodbc is used) 
3165
3166
-------------------------------------------------------------------
3167
Fri Mar 15 11:51:11 CET 2002 - tcrhak@suse.cz
3168
3169
- added %{_datadir}/lib/php and extension dir to devel filelist
3170
3171
-------------------------------------------------------------------
3172
Mon Mar  4 12:28:32 CET 2002 - okir@suse.de
3173
3174
- security fix
3175
3176
-------------------------------------------------------------------
3177
Fri Feb 22 14:27:51 CET 2002 - tcrhak@suse.cz
3178
3179
- Killed %{release} from "Requires" tags.
3180
-------------------------------------------------------------------
3181
Fri Feb  1 00:26:05 CET 2002 - ro@suse.de
3182
3183
- changed neededforbuild <libpng> to <libpng-devel-packages>
3184
3185
-------------------------------------------------------------------
3186
Mon Jan 28 12:40:33 CET 2002 - ro@suse.de
3187
3188
- added des to neededforbuild 
3189
3190
-------------------------------------------------------------------
3191
Mon Jan 28 01:35:33 CET 2002 - ro@suse.de
3192
3193
- added heimdal stuff to build 
3194
3195
-------------------------------------------------------------------
3196
Wed Jan 23 01:59:36 CET 2002 - ro@suse.de
3197
3198
- try to build with db-devel in neededforbuild 
3199
3200
-------------------------------------------------------------------
3201
Thu Jan 17 01:07:13 CET 2002 - ro@suse.de
3202
3203
- adapted for /etc/sysconfig/apache 
3204
3205
-------------------------------------------------------------------
3206
Thu Dec 20 14:16:12 CET 2001 - tcrhak@suse.cz
3207
3208
- update to 4.1.0
3209
- no mm support for aol and servlet (mm is not ZTS in 4.1 yet)
3210
- patched acinclude.m4 to find the very dir for mysql libraries
3211
- added `php-config --extension-dir` to core files
3212
3213
-------------------------------------------------------------------
3214
Thu Dec 10 17:56:38 CEST 2001 - tcrhak@suse.cz
3215
3216
- fixed extension section
3217
3218
-------------------------------------------------------------------
3219
Thu Dec  6 17:05:27 CEST 2001 - tcrhak@suse.cz
3220
3221
- added section [extension section] to php.ini
3222
- fixed options given to configure
3223
3224
-------------------------------------------------------------------
3225
Tue Dec  4 16:34:25 CEST 2001 - tcrhak@suse.cz
3226
3227
- fixed configure.in and config.m4's for autoconf 2.52
3228
- added libtoolize, autoconf, autoheader
3229
- used setJava to find JAVA_HOME
3230
- TTF - bug 9523
3231
- gd  - bug 12226
3232
- changed the order in which subpackages (for Servers) are built,
3233
- so that the devel package corresponds to core 
3234
- (=> experimental-zts disabled)
3235
- moved phpize to the devel package (fixed for autoconf 2.52)
3236
- added files needed by phpize to the devel package
3237
3238
-------------------------------------------------------------------
3239
Mon Dec  3 14:57:15 CET 2001 - ro@suse.de
3240
3241
- changed servlet dir for configure with jakarta 
3242
3243
-------------------------------------------------------------------
3244
Mon Dec  3 09:31:42 CET 2001 - ro@suse.de
3245
3246
- fixed neededforbuild <jakarta> to <jakarta-tomcat> 
3247
3248
-------------------------------------------------------------------
3249
Tue Nov 20 16:47:27 CET 2001 - rolf@suse.de
3250
3251
- changes to make IA64 work
3252
- exclude subpackages AOL and Servlet from AXP
3253
3254
-------------------------------------------------------------------
3255
Mon Nov 19 00:51:02 CET 2001 - ro@suse.de
3256
3257
- fix to find java 
3258
3259
-------------------------------------------------------------------
3260
Wed Nov 14 17:41:40 CET 2001 - rolf@suse.de
3261
3262
- new subpackage -devel with include files
3263
3264
-------------------------------------------------------------------
3265
Mon Nov 12 17:22:02 CET 2001 - ro@suse.de
3266
3267
- hack for libxml2 include location 
3268
3269
-------------------------------------------------------------------
3270
Fri Oct 26 01:36:56 CEST 2001 - ro@suse.de
3271
3272
- use qt2 for qtdom (but aparently that is not built anyway) 
3273
3274
-------------------------------------------------------------------
3275
Thu Oct 25 01:06:13 CEST 2001 - ro@suse.de
3276
3277
- try neededforbuild alias apache-devel-packages 
3278
3279
-------------------------------------------------------------------
3280
Tue Sep 11 00:01:57 CEST 2001 - ro@suse.de
3281
3282
- remove roxen subpackage
3283
  roxen is not in the distribution currently 
3284
3285
-------------------------------------------------------------------
3286
Wed Aug 22 13:11:37 CEST 2001 - ro@suse.de
3287
3288
- removed pdflib from neededforbuild (license problems) 
3289
3290
-------------------------------------------------------------------
3291
Tue Aug 14 09:26:15 CEST 2001 - ro@suse.de
3292
3293
- pear: changed header to look for php in "bindir" not "prefix/bin"
3294
  to fix requires 
3295
3296
-------------------------------------------------------------------
3297
Mon Aug 13 16:34:01 CEST 2001 - kukuk@suse.de
3298
3299
- Don't conflict with packages we are providing
3300
3301
-------------------------------------------------------------------
3302
Thu Aug  9 15:34:21 CEST 2001 - kukuk@suse.de
3303
3304
- Fix search for installed java directory
3305
3306
-------------------------------------------------------------------
3307
Tue Jul 24 12:13:56 CEST 2001 - rolf@suse.de
3308
3309
- new subpackage mod_php4-aolserver for use of PHP4 with AOL server
3310
- disable-debug so Zend optimizer can work
3311
3312
-------------------------------------------------------------------
3313
Thu Jul  5 14:24:21 CEST 2001 - rolf@suse.de
3314
3315
- update to php 4.0.6
3316
- apply memlimit patch
3317
- new subpackage mod_php4-servlet for use of PHP4 as JAVA servlet
3318
  with tomcat
3319
- new options: --with-gmp, --with-dom, mbstring
3320
3321
-------------------------------------------------------------------
3322
Mon Jun 25 15:44:59 CEST 2001 - rolf@suse.de
3323
3324
- fixed bug with pdflib which also fixes [BUG#8246]
3325
3326
-------------------------------------------------------------------
3327
Tue Jun 19 12:21:12 CEST 2001 - rolf@suse.de
3328
3329
- new version 4.0.5
3330
- disable pgsql for roxen, as it is broken
3331
- mysql bug fixed in this release [BUG#6839]
3332
- move stuff to /usr/share/php [BUG#8352]
3333
- now Provides: mod_php as well [BUG#8911]
3334
3335
-------------------------------------------------------------------
3336
Sat May 12 18:29:28 CEST 2001 - schwab@suse.de
3337
3338
- Use new readline interface.
3339
3340
-------------------------------------------------------------------
3341
Tue May  8 17:11:44 CEST 2001 - mfabian@suse.de
3342
3343
- bzip2 sources
3344
3345
-------------------------------------------------------------------
3346
Tue May  1 17:29:20 CEST 2001 - kukuk@suse.de
3347
3348
- disable adabas support
3349
3350
-------------------------------------------------------------------
3351
Thu Apr 26 02:26:23 CEST 2001 - ro@suse.de
3352
3353
- neededforbuild: curl_ssl-devel -> curl-devel
3354
3355
-------------------------------------------------------------------
3356
Sun Apr  8 21:09:52 CEST 2001 - poeml@suse.de
3357
3358
- fix Requires (rearrange tags to define them before using them)
3359
- fix spec file typo
3360
3361
-------------------------------------------------------------------
3362
Tue Mar 27 12:04:43 MEST 2001 - rolf@suse.de
3363
3364
- spin off subpackage mod_php4-core which is required by apache and
3365
  roxen modules now
3366
- moved config file to /etc/php.ini for all php4 modules
3367
- sybase support conflicts with Adabas D support
3368
- Ingres support is for Ingres II only
3369
- added t1lib support [BUG#6212]
3370
- updated asp2php 0.75.13
3371
- make us of suse_loadmodule for testing
3372
- added /usr/bin/php to core package [BUG#6648]
3373
3374
-------------------------------------------------------------------
3375
Wed Mar 21 23:27:14 CET 2001 - ro@suse.de
3376
3377
- changed neededforbuild to freetype2 
3378
3379
-------------------------------------------------------------------
3380
Thu Mar 15 14:16:49 CET 2001 - ro@suse.de
3381
3382
- build with openldap2 
3383
3384
-------------------------------------------------------------------
3385
Thu Mar 15 01:08:35 CET 2001 - ro@suse.de
3386
3387
- fixed neededforbuild for openldap
3388
3389
-------------------------------------------------------------------
3390
Mon Mar  5 23:58:57 CET 2001 - ro@suse.de
3391
3392
- use -fPIC 
3393
3394
-------------------------------------------------------------------
3395
Fri Feb 23 16:24:24 CET 2001 - ro@suse.de
3396
3397
- changed neededforbuild <apache> to <apache apache-devel>
3398
3399
-------------------------------------------------------------------
3400
Fri Feb 23 00:10:25 CET 2001 - ro@suse.de
3401
3402
- added readline/readline-devel to neededforbuild (split from bash)
3403
3404
-------------------------------------------------------------------
3405
Thu Feb 15 18:06:52 MET 2001 - rolf@suse.de
3406
3407
- new features imap-ssl, bz2, qtdom, ctype, debug, force-cgi-redirect,
3408
discard_path, sigchild, gd-imgstrttf
3409
- added apache-mod_php4.rc.config
3410
- added /etc/httpd/modules/mod_php4
3411
3412
-------------------------------------------------------------------
3413
Wed Jan 17 19:28:46 MET 2001 - rolf@suse.de
3414
3415
- add libpdf support
3416
3417
-------------------------------------------------------------------
3418
Tue Jan 16 13:06:31 MET 2001 - rolf@suse.de
3419
3420
- update to 4.0.4pl1 due to security issue [BUG#5760]
3421
- remove number4.tar.gz, no longer needed
3422
3423
-------------------------------------------------------------------
3424
Fri Jan 12 11:36:19 MET 2001 - rolf@suse.de
3425
3426
- need expat to compile [BUG#5104]
3427
- subpackage for roxen module
3428
3429
-------------------------------------------------------------------
3430
Fri Jan 12 09:39:57 CET 2001 - cihlar@suse.cz
3431
3432
- fixed to compile with roxe/pike [#4408]
3433
3434
-------------------------------------------------------------------
3435
Tue Dec 19 16:32:27 MET 2000 - rolf@suse.de
3436
3437
- link with libssl
3438
3439
-------------------------------------------------------------------
3440
Tue Dec 19 15:07:57 MET 2000 - rolf@suse.de
3441
3442
- added the asp2php package [BUG#4456]
3443
- roxen/pike still doesn´t work
3444
- require RPM group tag via apxs
3445
3446
-------------------------------------------------------------------
3447
Wed Nov 29 18:53:35 CET 2000 - ro@suse.de
3448
3449
- changed neededforbuild <pg_lib> to <postgresql-lib>
3450
3451
-------------------------------------------------------------------
3452
Mon Nov 27 17:41:02 MET 2000 - rolf@suse.de
3453
3454
- added Sablotron support     [BUG#3891]
3455
- added curl support          [BUG#3890]
3456
- added Flash support on i386 [BUG#3209]
3457
- also pack module files in /usr/lib/php/
3458
- moved the exec dir to /usr/lib/php/bin
3459
- include pear binaries
3460
- added the following modules: sockets, shmop, exif, filepro, dbase
3461
  readline, mcrypt, gettext
3462
3463
-------------------------------------------------------------------
3464
Wed Nov 15 18:29:49 CET 2000 - ro@suse.de
3465
3466
- fixed neededforbuild gdlib -> gd gd-devel
3467
3468
-------------------------------------------------------------------
3469
Thu Nov  9 00:27:01 CET 2000 - ro@suse.de
3470
3471
- prefer ndbm.h to db1/ndbm.h 
3472
3473
-------------------------------------------------------------------
3474
Mon Nov  6 10:11:58 CET 2000 - ro@suse.de
3475
3476
- added imap-devel to neededforbuild 
3477
3478
-------------------------------------------------------------------
3479
Mon Nov  6 01:17:41 CET 2000 - ro@suse.de
3480
3481
- fixed neededforbuild 
3482
3483
-------------------------------------------------------------------
3484
Mon Oct 16 17:58:45 GMT 2000 - bk@suse.de
3485
3486
- s390: --with-gd=yes -> --with-gd=shared(broken somehow with =yes)
3487
3488
-------------------------------------------------------------------
3489
Mon Oct 16 16:56:41 MEST 2000 - rolf@suse.de
3490
3491
- update tp 4.0.3pl1 due to some security breaches
3492
- needed to drop db3 and dbm support, as these are incompatible
3493
- enable FTP support [BUG#3862]
3494
3495
-------------------------------------------------------------------
3496
Wed Sep 13 15:47:02 CEST 2000 - fober@suse.de
3497
3498
- s390: suse_update_config, needs-not-forbuild adabas
3499
3500
-------------------------------------------------------------------
3501
Fri Jul  7 11:51:33 CEST 2000 - kukuk@suse.de
3502
3503
- Fix Requires and need for build
3504
3505
-------------------------------------------------------------------
3506
Fri Jun 23 13:11:09 CEST 2000 - rolf@suse.de
3507
3508
- added support for mcal and calendar functions [BUG#2925]
3509
3510
-------------------------------------------------------------------
3511
Mon Jun 19 00:01:12 CEST 2000 - ro@suse.de
3512
3513
- fixed to compile with new postgres 
3514
3515
-------------------------------------------------------------------
3516
Mon May 22 13:50:13 CEST 2000 - rolf@suse.de
3517
3518
- update to 4.0.0
3519
- --with-java is now broken
3520
3521
-------------------------------------------------------------------
3522
Fri May 12 13:49:15 CEST 2000 - rolf@suse.de
3523
3524
- update to 4.0RC2
3525
- a few more options are now functional
3526
3527
-------------------------------------------------------------------
3528
Thu Apr 13 11:12:26 CEST 2000 - ro@suse.de
3529
3530
- added mm to neededforbuild
3531
3532
-------------------------------------------------------------------
3533
Thu Mar 30 14:43:10 MEST 2000 - rolf@suse.de
3534
3535
- new version 4.0RC1
3536
- many options now work properly
3537
3538
-------------------------------------------------------------------
3539
Wed Mar  1 18:14:36 MET 2000 - rolf@suse.de
3540
3541
- zlib works again
3542
3543
-------------------------------------------------------------------
3544
Tue Feb 22 15:05:20 MET 2000 - rolf@suse.de
3545
3546
- new version 4b4pl1
3547
- now with --enable-thread-safety --with-gd=yes --with-ttf
3548
- imap support is now broken
3549
3550
-------------------------------------------------------------------
3551
Thu Dec 23 13:18:18 MET 1999 - rolf@suse.de
3552
3553
- dynamic JDK path detection
3554
- some fixes in DAV, still doesn´t work
3555
- now also runs with IMAP
3556
3557
-------------------------------------------------------------------
3558
Thu Nov 25 12:18:31 MET 1999 - rolf@suse.de
3559
3560
- initial package version 4.0b3
3561
3562
3563