Logoj0ke.net Open Build Service > Projects > internetx:php7 > php-7.0.18 > php7.changes
Sign Up | Log In

File php7.changes of Package php-7.0.18

 
1
-------------------------------------------------------------------
2
Mon May  8 07:51:10 UTC 2017 - cs@linux-administrator.com
3
4
- update to release 7.0.18
5
6
-------------------------------------------------------------------
7
Thu Mar 16 16:57:28 UTC 2017 - cs@linux-administrator.com
8
9
- update to release 7.0.17
10
11
-------------------------------------------------------------------
12
Fri Feb 17 19:51:08 UTC 2017 - cs@linux-administrator.com
13
14
- update to release 7.0.16
15
16
-------------------------------------------------------------------
17
Thu Jan 19 07:10:44 UTC 2017 - cs@linux-administrator.com
18
19
- update to release 7.0.15
20
21
-------------------------------------------------------------------
22
Fri Dec  9 07:19:59 UTC 2016 - cs@linux-administrator.com
23
24
- update to release 7.0.14
25
26
-------------------------------------------------------------------
27
Thu Nov 10 17:12:21 UTC 2016 - cs@linux-administrator.com
28
29
- update to release 7.0.13
30
31
-------------------------------------------------------------------
32
Mon Oct 17 10:24:44 UTC 2016 - cs@linux-administrator.com
33
34
- update to release 7.0.12
35
36
-------------------------------------------------------------------
37
Mon Sep 26 06:40:13 UTC 2016 - cs@linux-administrator.com
38
39
- update to release 7.0.11
40
41
-------------------------------------------------------------------
42
Tue Aug 23 13:59:43 UTC 2016 - cs@linux-administrator.com
43
44
- update to release 7.0.10
45
46
-------------------------------------------------------------------
47
Thu Jul 28 06:15:29 UTC 2016 - cs@linux-administrator.com
48
49
- update to release 7.0.9
50
51
-------------------------------------------------------------------
52
Thu Jul 28 06:13:40 UTC 2016 - cs@linux-administrator.com
53
54
- update to release 7.0.8
55
56
-------------------------------------------------------------------
57
Mon May 30 09:43:09 UTC 2016 - cs@linux-administrator.com
58
59
- update to release 7.0.7
60
61
-------------------------------------------------------------------
62
Tue May  3 09:36:17 UTC 2016 - cs@linux-administrator.com
63
64
- update to release 7.0.6
65
66
-------------------------------------------------------------------
67
Mon Apr 18 07:51:59 UTC 2016 - cs@linux-administrator.com
68
69
- update to release 7.0.5
70
71
-------------------------------------------------------------------
72
Sun Mar  6 20:16:46 UTC 2016 - cs@linux-administrator.com
73
74
- update to release 7.0.4
75
76
-------------------------------------------------------------------
77
Thu Feb  4 18:13:28 UTC 2016 - cs@linux-administrator.com
78
79
- update to release 7.0.3
80
81
-------------------------------------------------------------------
82
Fri Jan  8 14:07:28 UTC 2016 - pgajdos@suse.com
83
84
- update to 7.0.2: 31 reported bugs has been fixed, including 
85
  6 security related issues.
86
87
-------------------------------------------------------------------
88
Mon Dec 21 03:09:27 UTC 2015 - jimmy@boombatower.com
89
90
- update to 7.0.1
91
92
-------------------------------------------------------------------
93
Mon Dec 14 13:04:35 UTC 2015 - pgajdos@suse.com
94
95
- php5-pear-Archive_Tar provides 1.4.0
96
- install .depdb and .depdblock files along metadata
97
  * php5-depdb-path.patch
98
- versioned provides in subpackages
99
100
-------------------------------------------------------------------
101
Mon Dec 14 01:00:31 UTC 2015 - jimmy@boombatower.com
102
103
- Provide obsoletes for sub-packages to improve upgrade process.
104
105
-------------------------------------------------------------------
106
Wed Dec  9 09:26:50 UTC 2015 - jimmy@boombatower.com
107
108
- Obsolete php5 since php7 conflicts and should replace.
109
110
-------------------------------------------------------------------
111
Mon Dec  7 09:11:59 UTC 2015 - pgajdos@suse.com
112
113
- marcello at ceschia.de: fix path php-fpm.conf
114
115
-------------------------------------------------------------------
116
Mon Nov 23 09:57:50 UTC 2015 - pgajdos@suse.com
117
118
- set pear's metadata dir to %{peardir}
119
120
-------------------------------------------------------------------
121
Mon Nov 16 13:37:51 UTC 2015 - aj@ajaissle.de
122
123
- Spec cleanup
124
  * Split Archive_Tar from -pear sub packge to allow updating this
125
    part via rpm
126
  * Added "Provides: php-firebird" to -firebird sub package
127
  * Added "Provides: mod_php_any" to server api module packages
128
    -fastcgi and -fpm
129
130
-------------------------------------------------------------------
131
Mon Nov 16 09:05:15 UTC 2015 - pgajdos@suse.com
132
133
- test mod_php with %apache_test_module_curl
134
- restart apache during mod_php upgrade
135
136
-------------------------------------------------------------------
137
Tue Sep  8 10:52:00 UTC 2015 - pgajdos@suse.com
138
139
- add php5-fix_net-snmp_disable_MD5.patch [bnc#944302]
140
141
-------------------------------------------------------------------
142
Fri Sep  4 17:22:04 UTC 2015 - pgajdos@suse.com
143
144
- fixed segfault in odbc extension when result set is containing
145
  NULL (php bugs #52554, #53007) [bnc#935074] (internal)
146
  + php7-odbc-cmp-int-cast.patch
147
148
-------------------------------------------------------------------
149
Tue Jul 14 09:13:52 UTC 2015 - pgajdos@suse.com
150
151
- updated to 7.0.0
152
  * see NEWS for changes
153
  * see UPGRADING for 5.6.x -> 7.0.x transition
154
- removed unneded or not upstreamed patches for long time:
155
  * php5-cloexec.patch
156
  * php5-missing-extdeps.patch
157
  * php5-format-string-issues.patch
158
  * php5-per-mod-log.patch
159
  * php5-apache24-updates.patch
160
  * php5-crypto-checks.patch
161
  * php5-systzdata-r12.patch (new: php7-systzdata-v13.patch)
162
163
-------------------------------------------------------------------
164
Mon Jul 13 17:40:28 UTC 2015 - pgajdos@suse.com
165
166
- updated to 5.6.11: Five security-related issues in PHP were fixed 
167
  in this release, including CVE-2015-3152.
168
169
-------------------------------------------------------------------
170
Thu Jun 25 04:01:44 UTC 2015 - crrodriguez@opensuse.org
171
172
- php5-systemd-unit.patch: set Killmode=mixed in order 
173
  to ensure fpm and children forked by script can terminate
174
  cleanly.
175
176
-------------------------------------------------------------------
177
Wed Jun 24 07:32:15 UTC 2015 - pgajdos@suse.com
178
179
-  mod_php5.so executable
180
181
-------------------------------------------------------------------
182
Thu Jun 18 09:49:11 UTC 2015 - pgajdos@suse.com
183
184
- use apache-rpm-macros
185
186
-------------------------------------------------------------------
187
Thu Jun 18 09:47:53 UTC 2015 - pgajdos@suse.com
188
189
- updated to 5.6.10: Several bugs have been fixed as well as several 
190
  security issues into some bundled libraries (CVE-2015-3414, 
191
  CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326).
192
193
-------------------------------------------------------------------
194
Fri Jun  5 23:59:37 UTC 2015 - mrueckert@suse.de
195
196
- enable apparmor support: new BR libapparmor-devel
197
198
-------------------------------------------------------------------
199
Mon May 18 08:11:14 UTC 2015 - pgajdos@suse.com
200
201
- update to 5.6.9: Several bugs have been fixed.
202
- systzdata patch updated to r12
203
  - php5-systzdata-r10.patch
204
  + php5-systzdata-r12.patch
205
206
-------------------------------------------------------------------
207
Fri Apr 24 06:17:51 UTC 2015 - pgajdos@suse.com
208
209
- update to 5.6.8: Several bugs have been fixed some of them beeing 
210
  security related, like CVE-2015-1351 and CVE-2015-1352.
211
- refreshed php5-crypto-checks.patch
212
213
-------------------------------------------------------------------
214
Mon Apr 20 12:03:05 UTC 2015 - pgajdos@suse.com
215
216
- configure php-fpm with --localstatedir=/var [bnc#927147]
217
218
-------------------------------------------------------------------
219
Wed Apr  8 06:15:10 UTC 2015 - pgajdos@suse.com
220
221
- systzdata patch updated to r10
222
  - php5-systzdata-v7.patch
223
  + php5-systzdata-r10.patch
224
225
-------------------------------------------------------------------
226
Thu Apr  2 12:58:40 UTC 2015 - pgajdos@suse.com
227
228
- build against system gd and libzip only for 13.2 and above
229
230
-------------------------------------------------------------------
231
Tue Mar 24 13:26:49 UTC 2015 - pgajdos@suse.com
232
233
- update to 5.6.7: Several bugs have been fixed as well as 
234
  CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331.
235
236
-------------------------------------------------------------------
237
Tue Mar 24 13:21:19 UTC 2015 - pgajdos@suse.com
238
239
- build against system gd [bnc#923946]
240
241
-------------------------------------------------------------------
242
Fri Mar 20 08:18:12 UTC 2015 - pgajdos@suse.com
243
244
- build against system libzip [bnc#922894]
245
246
-------------------------------------------------------------------
247
Mon Feb 23 11:36:32 UTC 2015 - pgajdos@suse.com
248
249
- update to 5.6.6: fixes several bugs and addresses CVE-2015-0235 
250
  and CVE-2015-0273.
251
252
-------------------------------------------------------------------
253
Mon Feb  9 08:19:06 UTC 2015 - pgajdos@suse.com
254
255
- added README.default_socket_timeout [bnc#907519]
256
257
-------------------------------------------------------------------
258
Tue Feb  3 08:30:28 UTC 2015 - pgajdos@suse.com
259
260
- fix sle_11_sp3 build
261
262
-------------------------------------------------------------------
263
Mon Jan 26 08:52:12 UTC 2015 - pgajdos@suse.com
264
265
- update to 5.6.5: This release fixes several bugs as well as 
266
  CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232.
267
- removed patches:
268
  * php-CVE-2014-9426.patch
269
  * php-CVE-2014-9427.patch
270
  * php-CVE-2015-0231.patch
271
272
-------------------------------------------------------------------
273
Wed Jan 21 11:14:46 UTC 2015 - pgajdos@suse.com
274
275
- added php-CVE-2015-0231.patch [bnc#910659]
276
277
-------------------------------------------------------------------
278
Mon Jan  5 14:34:23 UTC 2015 - pgajdos@suse.com
279
280
- added php-CVE-2014-9426.patch [bnc#911663]
281
- added php-CVE-2014-9427.patch [bnc#911664]
282
283
-------------------------------------------------------------------
284
Fri Dec 19 08:00:32 UTC 2014 - pgajdos@suse.com
285
286
- update to 5.6.4: This release fixes several bugs and one CVE 
287
  related to unserialization.
288
289
-------------------------------------------------------------------
290
Tue Nov 18 14:28:08 UTC 2014 - pgajdos@suse.com
291
292
- update to 5.6.3: This release fixes several bugs and one CVE 
293
  in the fileinfo extension.
294
295
-------------------------------------------------------------------
296
Mon Oct 27 07:30:03 UTC 2014 - pgajdos@suse.com
297
298
- update to 5.6.2: Four security-related bugs were fixed in this 
299
  release, including fixes for CVE-2014-3668, CVE-2014-3669 and 
300
  CVE-2014-3670.
301
302
-------------------------------------------------------------------
303
Tue Oct 14 08:07:31 UTC 2014 - pgajdos@suse.com
304
305
- upgraded to 5.6.1:
306
  * Several bugs were fixed in this release (including CVE-2014-3622).
307
308
-------------------------------------------------------------------
309
Thu Oct  2 20:27:56 UTC 2014 - crrodriguez@opensuse.org
310
311
- php5-crypto-checks.patch: Fix broken libcrypto checks 
312
  DSA_get_default_method is in -lcrypto not -lssl
313
- DO not use xorg-x11-devel, just pkgconfig(xpm) and xft
314
- Support WEBP in the gd extension by buildrequiring libvpx-devel
315
316
-------------------------------------------------------------------
317
Fri Aug 29 09:32:42 UTC 2014 - pgajdos@suse.com
318
319
- fix CVE-2014-5459 [bnc#893849]
320
321
-------------------------------------------------------------------
322
Fri Aug 29 06:06:20 UTC 2014 - pgajdos@suse.com
323
324
- actually, there's no point to install pear from other source
325
  than from php tarball
326
  * remove source install-pear-nozlib.phar
327
328
-------------------------------------------------------------------
329
Thu Aug 28 14:57:42 UTC 2014 - pgajdos@suse.com
330
331
- updated PEAR to 1.9.5, bugfix release
332
  see http://pear.php.net/package/PEAR/download
333
  for details
334
335
-------------------------------------------------------------------
336
Thu Aug 28 12:49:25 UTC 2014 - pgajdos@suse.com
337
338
- updated to 5.6.0:
339
  * Most improvements in PHP 5.6.x have no impact on existing code. 
340
    There are a few incompatibilities and new features that should 
341
    be considered:
342
    http://php.net/manual/en/migration56.php
343
- removed patches:
344
  * php5-big-file-upload.patch (upstreamed)
345
  * php5-suhosin-php55.patch (upstreamed)
346
- modified patches:
347
  * php5-openssl.patch (refreshed)
348
349
-------------------------------------------------------------------
350
Tue Aug 26 06:50:40 UTC 2014 - pgajdos@suse.com
351
352
- This release fixes several bugs against PHP 5.5.15 and resolves 
353
  CVE-2014-3538, CVE-2014-3587, CVE-2014-2497, CVE-2014-5120 and 
354
  CVE-2014-3597. 
355
- removed patches:
356
  * php-CVE-2014-2497.patch
357
358
-------------------------------------------------------------------
359
Tue Jul 29 08:04:01 UTC 2014 - pgajdos@suse.com
360
361
- updated to 5.5.15:
362
  This release fixes several bugs against PHP 5.5.14. 
363
  The list of changes is recorded in the ChangeLog or
364
  http://php.net/ChangeLog-5.php#5.5.15.
365
- removed patches:
366
  * php-CVE-2014-4670.patch (upstreamed)
367
  * php-CVE-2014-4698.patch (upstreamed)
368
-------------------------------------------------------------------
369
Thu Jul 17 14:32:29 UTC 2014 - pgajdos@suse.com
370
371
- security update:
372
  * php-CVE-2014-4670.patch [bnc#886059]
373
  * php-CVE-2014-4698.patch [bnc#886060]
374
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
375
376
-------------------------------------------------------------------
377
Tue Jul  1 06:58:06 UTC 2014 - pgajdos@suse.com
378
379
- updated to 5.5.14: This release fixes several bugs against
380
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
381
  half of them concerning the FileInfo extension.
382
- removed php-5.5.13-CVE-2014-4049.patch (upstreamed)
383
384
-------------------------------------------------------------------
385
Tue Jun 17 15:56:53 UTC 2014 - pgajdos@suse.com
386
387
- security update
388
  * php-5.5.13-CVE-2014-4049.patch [bnc#882992]
389
390
-------------------------------------------------------------------
391
Tue Jun 17 07:17:37 UTC 2014 - pgajdos@suse.com
392
393
- php5-5.5.10-CVE-2014-2497.patch renamed to
394
  php-5.5.10-CVE-2014-2497.patch to be consistent with other 
395
  product php patches names
396
397
-------------------------------------------------------------------
398
Tue Jun  3 12:03:33 UTC 2014 - pgajdos@suse.com
399
400
- do not package latest_test_results.txt; instead, run build-test.sh
401
  twice: before and after source changes
402
403
-------------------------------------------------------------------
404
Mon Jun  2 09:37:59 UTC 2014 - pgajdos@suse.com
405
406
- updated to 5.5.13: This release fixes several bugs in PHP 5.5.12, 
407
  and addresses two CVEs in Fileinfo (CVE-2014-0238 and CVE-2014-0237).
408
409
-------------------------------------------------------------------
410
Wed May  7 12:08:46 UTC 2014 - pgajdos@suse.com
411
412
- updated to 5.5.12: Fixed several bugs against PHP 5.5.11, 
413
  as well as CVE-2014-0185 regarding PHP-FPM.
414
- improved build-test.sh
415
416
-------------------------------------------------------------------
417
Wed Apr 30 12:07:22 UTC 2014 - pgajdos@suse.com
418
419
- build-test.sh: use relevant api for build; propagate build 
420
  parameters to osc
421
422
-------------------------------------------------------------------
423
Wed Apr 30 08:47:24 UTC 2014 - schwab@linux-m68k.org
424
425
- php5-gcc_builtins.patch: remove unused patch
426
427
-------------------------------------------------------------------
428
Tue Apr 29 09:34:56 UTC 2014 - pgajdos@suse.com
429
430
- add build-test.sh and latest_test_results.txt for testing 
431
  regressions in tests before and after update. Run
432
  
433
  sh build-test.sh 
434
435
  after changes. php will get built and test results will be
436
  compared with latest_test_results.txt and differences reported.
437
438
  mv latest_test_results.txt.new latest_test_results.txt
439
440
  if differences are acceptable.
441
442
-------------------------------------------------------------------
443
Wed Apr  9 06:29:41 UTC 2014 - pgajdos@suse.com
444
445
- updated to 5.5.11:
446
  * Several bugs were fixed in this release, some bundled libraries 
447
    updated and a security issue has been fixed : CVE-2013-7345.
448
449
-------------------------------------------------------------------
450
Fri Apr  4 12:20:16 UTC 2014 - pgajdos@suse.com
451
452
- fixed CVE-2014-2497 [bnc#868624]
453
454
-------------------------------------------------------------------
455
Mon Mar 17 12:11:34 UTC 2014 - pgajdos@suse.com
456
457
- updated to 5.5.10:
458
  * Several bugs were fixed in this release, including security 
459
    issues related to CVEs. CVE-2014-1943, CVE-2014-2270 and 
460
    CVE-2013-7327 have been addressed in this release.
461
462
-------------------------------------------------------------------
463
Tue Feb 11 00:21:52 UTC 2014 - adaugherity@tamu.edu
464
465
- Fix build on non-systemd distros (esp. SLES 11)
466
467
-------------------------------------------------------------------
468
Fri Feb  7 09:46:47 UTC 2014 - pgajdos@suse.com
469
470
- updated to 5.5.9:
471
  * This release fixes several bugs against PHP 5.5.8.
472
  * see NEWS or http://www.php.net/ChangeLog-5.php#5.5.9 for 
473
    details
474
- modified patches:
475
  * php5-no-build-date.patch (refreshed using quilt)
476
477
-------------------------------------------------------------------
478
Mon Jan 13 08:35:59 UTC 2014 - pgajdos@suse.com
479
480
- updated to 5.5.8: 
481
  * fixes CVE-2013-6712 and build against freetype2
482
  * see http://www.php.net/ChangeLog-5.php#5.5.8
483
    for more
484
  * removed CVE-2013-6712.patch
485
  * removed freetype2_include_dir.patch
486
487
-------------------------------------------------------------------
488
Fri Dec 20 12:03:41 UTC 2013 - hrvoje.senjan@gmail.com
489
490
- Added php5-freetype2_include_dir.patch: Fixes check of freetype2
491
  headers, as freetype2 2.5.1 changed the header location
492
493
-------------------------------------------------------------------
494
Wed Dec 18 11:35:27 UTC 2013 - pgajdos@suse.com
495
496
- updated to 5.5.7:
497
  * fixes some bugs against PHP 5.5.6 and it also includes a fix 
498
    for CVE-2013-6420 in OpenSSL extension
499
  -> removed CVE-2013-6420.patch
500
501
-------------------------------------------------------------------
502
Wed Dec 11 12:54:11 UTC 2013 - pgajdos@suse.com
503
504
- security update [bnc#854880]
505
  * added CVE-2013-6420.patch
506
507
-------------------------------------------------------------------
508
Tue Dec  3 12:24:28 UTC 2013 - pgajdos@suse.com
509
510
- security update [bnc#853045]
511
  * added CVE-2013-6712.patch
512
513
-------------------------------------------------------------------
514
Mon Nov 22 10:10:50 UTC 2013 - pgajdos@suse.com
515
516
- updated to 5.5.6:
517
  * fixes some bugs against PHP 5.5.5, and adds some performance
518
    improvements.
519
  * see http://www.php.net/ChangeLog-5.php#5.5.6 for details
520
521
-------------------------------------------------------------------
522
Mon Nov 22 10:10:49 UTC 2013 - pgajdos@suse.com
523
524
- updated to 5.5.5:
525
  * This release fixes about twenty bugs against PHP 5.5.4, some
526
    of them regarding the build system.
527
  * added sys_temp_dir ini directive
528
- removed custom-tmp-dir.patch (upstreamed)
529
530
-------------------------------------------------------------------
531
Mon Nov 22 10:10:48 UTC 2013 - pgajdos@suse.com
532
533
- updated to 5.5.4:
534
  * This release fixes several bugs against PHP 5.5.3.
535
- crypt-tests.patch partially upstreamed
536
- use zend_extension instead of extension directive in opcache.ini
537
  [bnc#840350]
538
539
-------------------------------------------------------------------
540
Mon Nov 22 10:10:47 UTC 2013 - pgajdos@suse.com
541
542
- updated to 5.5.3: These release fix a bug in the patch for
543
  CVE-2013-4248 in OpenSSL module and compile failure with ZTS enabled
544
  in PHP 5.4.
545
546
-------------------------------------------------------------------
547
Mon Nov 22 10:10:46 UTC 2013 - pgajdos@suse.com
548
549
- updated to 5.5.2:
550
  * About 20 bugs were fixed, including security issue in OpenSSL
551
    module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).
552
553
-------------------------------------------------------------------
554
Mon Nov 22 10:10:45 UTC 2013 - pgajdos@suse.com
555
556
- updated to 5.5.1
557
  * bugfixes incl. security fix in the XML parser
558
559
-------------------------------------------------------------------
560
Mon Nov 22 10:10:44 UTC 2013 - Ralf Lang <lang@b1-systems.de>
561
562
- replace php5-64-bit-post-large-files.patch with php5-big-file-upload.patch
563
  patch that uses def_t instead of signed long as suggested by upstream
564
565
-------------------------------------------------------------------
566
Mon Nov 22 10:10:43 UTC 2013 - pgajdos@suse.com
567
568
- updated to 5.5.0:
569
  * Added generators and coroutines.
570
  * Added the finally keyword.
571
  * Added a simplified password hashing API.
572
  * Added support for constant array/string dereferencing.
573
  * Added scalar class name resolution via ::class.
574
  * Added support for using empty() on the result of function
575
    calls and other expressions.
576
  * Added support for non-scalar Iterator keys in foreach.
577
  * Added support for list() constructs in foreach statements.
578
  * Added the Zend OPcache extension for opcode caching.
579
  * A lot more improvements and fixes.
580
  * PHP logo GUIDs have been removed.
581
  * Case insensitivity is no longer locale specific. All case
582
    insensitive matching for function, class and constant names
583
    is now performed in a locale independent manner according to
584
    ASCII rules.
585
- buildrequire cyrus-sasl-devel explicitely
586
- suhosin-php54.patch renamed to suhosin-php55.patch
587
588
-------------------------------------------------------------------
589
Mon Nov 18 10:10:43 UTC 2013 - pgajdos@suse.com
590
591
- update to 5.4.22:
592
  * About 10 bugs were fixed.
593
  * see http://www.php.net/ChangeLog-5.php#5.4.22 for details
594
595
-------------------------------------------------------------------
596
Wed Oct 30 07:56:07 UTC 2013 - pgajdos@suse.com
597
598
- updatedto 5.4.21:
599
  * About 10 bugs were fixed.
600
  * added custom-tmp-dir.patch by Per Jessen
601
602
-------------------------------------------------------------------
603
Sun Oct 13 21:24:58 UTC 2013 - crrodriguez@opensuse.org
604
605
- build with --with-fpm-systemd and install systemd unit 
606
- php5-systemd-unit.patch: tweak systemd unit for openSUSE requirements
607
- php5-openssl.patch: only openSSL_config() is really needed.
608
- Recommended for 13.1 and Factory
609
610
-------------------------------------------------------------------
611
Wed Sep 25 09:30:23 UTC 2013 - pgajdos@suse.com
612
613
- updated to 5.4.20:
614
  * About 30 bugs were fixed.
615
616
-------------------------------------------------------------------
617
Thu Sep  5 12:44:11 UTC 2013 - pgajdos@suse.com
618
619
- updated to 5.4.19:
620
  * These releases fix a bug in the patch for CVE-2013-4248 in 
621
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.
622
623
-------------------------------------------------------------------
624
Tue Aug 20 10:44:04 UTC 2013 - pgajdos@suse.com
625
626
- updated to 5.4.18:
627
  * About 30 bugs were fixed, including security issues CVE-2013-4113 
628
    and CVE-2013-4248.
629
630
-------------------------------------------------------------------
631
Thu Aug  1 21:28:15 UTC 2013 - crrodriguez@opensuse.org
632
633
- php5-per-mod-log.patch: It turns out that requesting per-module
634
 logging support in 2.4 will not do a thing if the expansion
635
 of APLOG_USE_MODULE is not visible to all files of the module
636
 so place it in the header instead.
637
638
-------------------------------------------------------------------
639
Wed Jul 31 01:21:24 UTC 2013 - crrodriguez@opensuse.org
640
641
- php5-per-mod-log.patch Support apache 2.4 per module logging 
642
- php5-apache24-updates.patch Use proper API in apache 2.4 
643
  to determine when the module has to be loaded.
644
  I made this patches at least a year ago, but for some reason
645
  they went out of my radar and were not applied to upstream
646
  Will be submitted again soon.
647
648
-------------------------------------------------------------------
649
Mon Jul 15 14:49:21 UTC 2013 - pgajdos@suse.com
650
651
- updated to 5.4.17:
652
    Core:
653
        Fixed bug #64988 (Class loading order affects E_STRICT warning).
654
        Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
655
        Fixed bug #64960 (Segfault in gc_zval_possible_root).
656
        Fixed bug #64936 (doc comments picked up from previous scanner run).
657
        Fixed bug #64934 (Apache2 TS crash with get_browser()).
658
        Fixed bug #64166 (quoted-printable-encode stream filter incorrectly 
659
                          discarding whitespace).
660
    DateTime:
661
        Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
662
    FPM:
663
        Fixed bug #64915 (error_log ignored when daemonize=0).
664
        Implemented FR #64764 (add support for FPM init.d script).
665
    PDO:
666
        Fixed bug #63176 (Segmentation fault when instantiate 2 persistent 
667
                          PDO to the same db server).
668
    PDO_DBlib:
669
        Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
670
        Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
671
        Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not 
672
                          executed statement crashes).
673
    PDO_firebird:
674
        Fixed bug #64037 (Firebird return wrong value for numeric field).
675
        Fixed bug #62024 (Cannot insert second row with null using 
676
                          parametrized query).
677
    PDO_mysql:
678
        Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT, 
679
                          TINYINT and YEAR).
680
    PDO_pgsql:
681
        Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
682
    pgsql:
683
        Fixed bug #64609 (pg_convert enum type support).
684
    Readline:
685
        Implement FR #55694 (Expose additional readline variable to prevent 
686
                             default filename completion).
687
    SPL:
688
        Fixed bug #64997 (Segfault while using RecursiveIteratorIterator 
689
                          on 64-bits systems).
690
691
-------------------------------------------------------------------
692
Tue Jun 18 10:32:25 UTC 2013 - jengelh@inai.de
693
694
- Explicitly specify cyrus-sasl build dependency
695
696
-------------------------------------------------------------------
697
Thu Jun 13 09:38:54 UTC 2013 - pgajdos@suse.com
698
699
- updated to 5.4.16
700
- Core:
701
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
702
    CVE 2013-2110). (Stas)
703
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
704
    TS build). (Anatol)
705
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
706
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
707
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
708
    (Stas, reported by Juha Kylmänen)
709
710
- Calendar:
711
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
712
713
- Fileinfo:
714
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
715
716
- FPM:
717
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
718
  . Fixed some possible memory or resource leaks and possible null dereference
719
    detected by code coverity scan. (Remi)
720
  . Log a warning when a syscall fails. (Remi)
721
  . Add --with-fpm-systemd option to report health to systemd, and
722
    systemd_interval option to configure this. The service can now use
723
    Type=notify in the systemd unit file. (Remi)
724
725
- MySQLi
726
 . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
727
    pointer has closed). (Laruence)
728
729
- Phar
730
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
731
    with non std tmp dir). (Pierre)
732
733
- SNMP:
734
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
735
    (Boris Lytochkin)
736
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
737
738
- Streams:
739
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
740
    on Windows x64). (Anatol)
741
742
- Zend Engine:
743
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
744
    overridden). (Anatol)
745
746
-------------------------------------------------------------------
747
Fri May 10 06:58:11 UTC 2013 - pgajdos@suse.com
748
749
- updated to 5.4.15:
750
    Core:
751
        Fixed bug #64578 (debug_backtrace in set_error_handler 
752
           corrupts zend heap: segfault).
753
        Fixed bug #64458 (dns_get_record result with string of 
754
           length -1).
755
        Fixed bug #64433 (follow_location parameter of context 
756
           is ignored for most response codes).
757
        Fixed bug #47675 (fd leak on Solaris).
758
        Fixed bug #64577 (fd leak on Solaris).
759
    Fileinfo:
760
        Upgraded libmagic to 5.14.
761
    Streams:
762
        Fixed Windows x64 version of stream_socket_pair() and 
763
           improved error handling.
764
    Zip:
765
        Fixed bug #64342 (ZipArchive::addFile() has to check 
766
           for file existence).
767
768
-------------------------------------------------------------------
769
Fri Apr 26 19:45:03 UTC 2013 - adaugherity@tamu.edu
770
771
- Conflict with php53 packages so zypper doesn't suggest installing a
772
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).
773
774
-------------------------------------------------------------------
775
Fri Apr 26 19:20:28 UTC 2013 - adaugherity@tamu.edu
776
777
- Fix build on SLES 11 (no firebird) and openSUSE <= 12.1 (no separate
778
  libfbclient2-devel pkg).
779
780
-------------------------------------------------------------------
781
Mon Apr 22 13:33:25 UTC 2013 - pgajdos@suse.com
782
783
- use current install-pear-nozlib.phar from
784
  http://pear.php.net/install-pear-nozlib.phar
785
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
786
  see explanation in the spec
787
788
-------------------------------------------------------------------
789
Wed Apr 17 17:35:33 UTC 2013 - slavb18@gmail.com
790
791
- add php5-firebird providing php5-interbase and php5-pdo_firebird 
792
793
-------------------------------------------------------------------
794
Mon Apr 15 09:38:23 UTC 2013 - pgajdos@suse.com
795
796
- updated to 5.4.14:
797
    Core:
798
        Fixed bug #64529 (Ran out of opcode space).
799
        Fixed bug #64515 (Memoryleak when using the same variablename 
800
                          two times in function declaration).
801
        Fixed bug #64432 (more empty delimiter warning in strX methods).
802
        Fixed bug #64417 (ArrayAccess::&offsetGet() in a trait causes 
803
                          fatal error).
804
        Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
805
        Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10 
806
                          or 5.4.11).
807
        Fixed bug #63976 (Parent class incorrectly using child constant 
808
                          in class property).
809
        Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not 
810
                          handle exceptions properly).
811
        Fixed bug #62343 (Show class_alias In get_declared_classes()).
812
    PCRE:
813
        Merged PCRE 8.32.
814
    SNMP:
815
        Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly). 
816
    Zip:
817
        Fixed bug #64452 (Zip crash intermittently). (Anatol) 
818
819
-------------------------------------------------------------------
820
Mon Apr 15 09:22:26 UTC 2013 - pgajdos@suse.com
821
822
- libc-client.so needs -lssl
823
824
-------------------------------------------------------------------
825
Fri Apr  5 13:34:28 UTC 2013 - pgajdos@suse.com
826
827
- fixed 'http limits uploads to 2GB' [bnc#812800], see
828
  https://bugs.php.net/bug.php?id=44522
829
  * 64bit-post-large-files.patch
830
831
-------------------------------------------------------------------
832
Thu Mar 21 11:58:40 UTC 2013 - pgajdos@suse.com
833
834
- updated to 5.4.13:
835
    Core:
836
        Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
837
        Implemented FR #64175 (Added HTTP codes as of RFC 6585).
838
        Fixed bug #64142 (dval to lval different behavior on ppc64).
839
        Fixed bug #64070 (Inheritance with Traits failed with error).
840
    CLI server:
841
        Fixed bug #64128 (buit-in web server is broken on ppc64).
842
    Mbstring:
843
        mb_split() can now handle empty matches like preg_split() does.
844
    OpenSSL:
845
        Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
846
    PDO_mysql:
847
        Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
848
    Phar:
849
        Fixed timestamp update on Phar contents modification.
850
    SOAP
851
        Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
852
        Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
853
    SPL:
854
        Fixed bug #64264 (SPLFixedArray toArray problem).
855
        Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
856
        Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
857
        Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
858
    SNMP:
859
        Fixed bug #64124 (IPv6 malformed).
860
861
-------------------------------------------------------------------
862
Thu Mar 21 09:27:28 UTC 2013 - pgajdos@suse.com
863
864
- updated to 5.4.12:
865
  * dropped sqlite.so (no longer shipped with 5.4)
866
  * dropped t1lib support
867
  * dropped %{suse_version} 10.x support
868
  * see /usr/share/doc/packages/php5/UPGRADING or
869
    http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/UPGRADING
870
    for details
871
  * source changes:
872
    D    php-5.2.9-BNC-457056.patch -- renamed to php5-BNC-457056.patch
873
    D    php-5.3.0-bnc513080.patch -- there's no relevant code in exif.c
874
    D    php-5.3.1-systzdata-v7.patch -- renamed to php5-systzdata-v7.patch
875
    D    php-5.3.2-aconf26x.patch -- dropped, it is not needed yet
876
    D    php-5.3.2-ini.patch -- renamed to php5-ini.patch
877
    D    php-5.3.2-no-build-date.patch -- renamed to php5-no-build-date.patch
878
    D    php-5.3.22.tar.bz2 -- old tarball
879
    D    php-5.3.4-format-string-issues.patch -- renamed to php5-format-string-issues.patch
880
    D    php-5.3.4-pts.patch -- renamed to php5-pts.patch
881
    D    php-5.3.6-gcc_builtins.patch -- renamed to php5-gcc_builtins.patch
882
    D    php-5.3.6-ini-date.timezone.patch -- part of php5-ini.patch
883
    D    php-5.3.8-CVE-2011-4153.patch -- fixed in 5.4 branch
884
    D    php-5.3.8-crypt-tests.patch -- renamed to php5-crypt-tests.patch
885
    D    php-5.3.8-no-reentrant-crypt.patch -- renamed to php5-no-reentrant-crypt.patch
886
    A    php-5.4.13.tar.bz2 -- new version tarball
887
    D    php-cloexec.patch -- renamed to php5-cloexec.patch
888
    M    php-suse-addons.tar.bz2 -- content of tar balls are actualy equal
889
    A    php5-BNC-457056.patch -- renamed from php-5.2.9-BNC-457056.patch, not rebased
890
    A    php5-cloexec.patch -- renamed from php-cloexec.patch, rebased
891
    A    php5-sytzdata-v7.patch -- renamed from sytzdata-v7.pach, not rebased
892
    A    php-format-string-issues.patch -- renamed from php5-5.3.4-format-string-issues.patch, not rebased
893
    A    php5-crypt-tests.patch -- renamed from php-5.3.8-crypt-tests.patch, not rebased
894
    A    php5-gcc_builtins.patch -- renamed from php-5.3.6-gcc_builtins.patch, not rebased
895
    A    php5-ini.patch -- renamed from php-5.3.2-ini.patch, rebased
896
    A    php5-mbstring-missing-return.patch -- new patch, missing return
897
    M    php5-missing-extdeps.patch -- rebased
898
    A    php5-no-build-date.patch -- renamed from php-5.3.2-no-build-date.patch, rebased
899
    A    php5-no-reentrant-crypt.patch -- renamed from php-5.3.8-no-reentrant-crypt.patch, not rebased
900
    M    php5-openssl.patch -- rebased
901
    M    php5-phpize.patch -- rebased
902
    A    php5-pts.patch -- renamed from php-5.3.4-pts.patch, not rebased
903
    A    php5-suhosin-php54.patch -- patch on top of suhosin-0.9.33.tgz to work with php 5.4
904
    M    php5.changes -- this change log
905
    M    php5.spec -- new version, etc
906
    D    suhosin-patch-5.3.3-0.9.10.patch.gz -- dropped, seems not be used for some time
907
908
-------------------------------------------------------------------
909
Mon Feb 25 10:13:28 UTC 2013 - pgajdos@suse.com
910
911
- updated to 5.3.22:
912
  . Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes)
913
  . Fixed bug #63899 (Use after scope error in zend_compile). (Laruence)
914
  . Fixed bug #63943 (Bad warning text from strpos() on empty needle).
915
    (Laruence)
916
  . Fixed bug #55397 (comparsion of incomplete DateTime causes SIGSEGV).
917
    (Laruence, Derick)
918
  . Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)
919
  . Added check that soap.wsdl_cache_dir conforms to open_basedir
920
    (CVE-2013-1635). (Dmitry)
921
  . Disabled external entities loading (CVE-2013-1643). (Dmitry)
922
  . Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended). (Nikita Popov)
923
924
-------------------------------------------------------------------
925
Thu Feb  7 12:05:01 UTC 2013 - pgajdos@suse.com
926
927
- updated to 5.3.21:
928
  * Fixed bug #63762 (Sigsegv when Exception::$trace is changed by user).
929
  * Fixed bug (segfault due to libcurl connection caching).
930
  * Fixed bug #63795 (CURL >= 7.28.0 no longer support value 1 for CURLOPT_SSL_VERIFYHOST).
931
  etc. see NEWS for details
932
933
-------------------------------------------------------------------
934
Thu Oct 18 10:18:41 UTC 2012 - pgajdos@suse.com
935
936
- fix CVE-2011-4153 CVE-2011-4153 [bnc#741859]
937
938
-------------------------------------------------------------------
939
Tue Oct 16 12:37:36 UTC 2012 - coolo@suse.com
940
941
- add explicit buildrequire on libbz2-devel
942
  (having to patch old .changes file to avoid "double entry")
943
944
-------------------------------------------------------------------
945
Thu Oct 11 09:16:27 UTC 2012 - pgajdos@suse.com
946
947
- updated to 5.3.17:
948
  * Fixed bug (segfault while build with zts and GOTO vm-kind)
949
  * Fixed bug #62844 (parse_url() does not recognize //
950
  * etc. see NEWS for details
951
952
-------------------------------------------------------------------
953
Mon Aug 27 14:47:48 UTC 2012 - pgajdos@suse.com
954
955
- use FilesMatch with 'SetHandler' rather than 'AddHandler'
956
  [bnc#775852]
957
958
-------------------------------------------------------------------
959
Mon Aug 27 14:44:27 UTC 2012 - pgajdos@suse.com
960
961
- updated to 5.3.16:
962
  * fixes over 20 bugs, see NEWS for more details
963
964
-------------------------------------------------------------------
965
Wed Jul 25 12:48:08 UTC 2012 - pgajdos@suse.com
966
967
- updated to 5.3.15:
968
  * fixes over 30 bugs and includes a fix for a security related 
969
    overflow issue in the stream implementation (CVE-2012-2688)
970
    [bnc#772582] and open_basedir bypass, CVE-2012-3365 [bnc#772580]
971
972
-------------------------------------------------------------------
973
Mon Jun 18 17:08:57 UTC 2012 - pgajdos@suse.com
974
975
- updated to 5.3.14: 
976
  * bug-fix release, see NEWS for details
977
978
-------------------------------------------------------------------
979
Fri May 25 15:10:26 UTC 2012 - pgajdos@suse.com
980
981
- updated to 5.3.13: various security fixes, 
982
  CVE-2012-1823, CVE-2012-2311, CVE-2012-2335, CVE-2012-2336
983
  * removed php-5.3.10-pcre_fullinfo.patch 
984
  * refreshed php-5.3.2-aconf26x.patch
985
986
-------------------------------------------------------------------
987
Thu Mar  8 19:40:22 UTC 2012 - coolo@suse.com
988
989
- fix license to spdx.org format
990
991
-------------------------------------------------------------------
992
Tue Feb 28 09:08:30 UTC 2012 - pgajdos@suse.com
993
994
- fixed build with new pcre (php bug 60986) 
995
996
-------------------------------------------------------------------
997
Sat Feb  4 16:35:07 UTC 2012 - crrodriguez@opensuse.org
998
999
- Build with -fpie 
1000
1001
-------------------------------------------------------------------
1002
Thu Feb  2 21:31:00 UTC 2012 - crrodriguez@opensuse.org
1003
1004
- PHP 5.3.10, fixes CVE-2012-0830.
1005
1006
-------------------------------------------------------------------
1007
Sat Jan 28 18:52:35 UTC 2012 - crrodriguez@opensuse.org
1008
1009
- remove unapplied patches 
1010
1011
-------------------------------------------------------------------
1012
Wed Jan 18 15:17:02 UTC 2012 - pgajdos@suse.com
1013
1014
- buildrequire libjpeg-devel
1015
1016
-------------------------------------------------------------------
1017
Tue Jan 17 08:35:44 UTC 2012 - pgajdos@suse.com
1018
1019
- remove apache module conflict with apache2-worker [bnc#728671]
1020
- amended README.SUSE instead
1021
1022
-------------------------------------------------------------------
1023
Wed Jan 11 01:46:14 UTC 2012 - crrodriguez@opensuse.org
1024
1025
- Update to version 5.3.9
1026
  * Drop already applied patches
1027
  * This update only contain minor bug fixes, it is a stop over
1028
    php 5.4.0 that should be out very soon.
1029
1030
-------------------------------------------------------------------
1031
Mon Jan  2 16:52:43 UTC 2012 - pgajdos@suse.com
1032
1033
- security update:
1034
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
1035
    to prevent attacks based on hash collisions
1036
1037
-------------------------------------------------------------------
1038
Wed Dec 21 10:40:03 UTC 2011 - coolo@suse.com
1039
1040
- add autoconf as buildrequire to avoid implicit dependency
1041
1042
-------------------------------------------------------------------
1043
Tue Dec 20 12:06:57 UTC 2011 - pgajdos@suse.com
1044
1045
- apache module conflicts with apache2-worker [bnc#728671]
1046
1047
-------------------------------------------------------------------
1048
Fri Dec 16 13:31:56 UTC 2011 - pgajdos@suse.com
1049
1050
- security update:
1051
  * CVE-2011-4566 [bnc#733590]
1052
  * CVE-2011-1466 [bnc#736169]
1053
1054
-------------------------------------------------------------------
1055
Tue Dec  6 12:24:39 UTC 2011 - coolo@suse.com
1056
1057
- fix license - there is no 3.1 version of php license
1058
1059
-------------------------------------------------------------------
1060
Tue Nov 29 15:32:57 UTC 2011 - pgajdos@suse.com
1061
1062
- build php against system's libcrypt, which drops
1063
  extended DES support
1064
  * crypt-tests.patch
1065
  * no-reentrant-crypt.patch
1066
1067
-------------------------------------------------------------------
1068
Mon Nov  7 13:36:25 UTC 2011 - pgajdos@suse.com
1069
1070
- security update:
1071
  CVE-2011-3379 [bnc#728350]
1072
1073
-------------------------------------------------------------------
1074
Sun Sep 18 22:08:00 UTC 2011 - crrodriguez@opensuse.org
1075
1076
- Fix wrong PAGE_SIZE assumption, must use sysconf() instead
1077
- Fix integer overflow when attempting to use more than 2 Gb 
1078
  of memory.
1079
1080
-------------------------------------------------------------------
1081
Mon Sep  5 01:20:22 UTC 2011 - crrodriguez@opensuse.org
1082
1083
- call openssl_config too in order to load user-provided 
1084
  engine configuration.
1085
1086
-------------------------------------------------------------------
1087
Sat Sep  3 05:18:44 UTC 2011 - crrodriguez@opensuse.org
1088
1089
- Cleanup patches for upcoming release.
1090
1091
-------------------------------------------------------------------
1092
Sun Aug 28 20:59:36 UTC 2011 - andrea.turrini@gmail.com
1093
1094
- Fixed typos in php5.spec
1095
1096
-------------------------------------------------------------------
1097
Tue Aug 23 03:35:25 UTC 2011 - crrodriguez@opensuse.org
1098
1099
- Fix very publicized critical bug in crypt() implementation
1100
1101
-------------------------------------------------------------------
1102
Fri Aug 12 02:27:08 UTC 2011 - crrodriguez@opensuse.org
1103
1104
- Add mssql support with freetds 
1105
- Update PHP snapshot.
1106
1107
-------------------------------------------------------------------
1108
Tue Aug  9 22:11:30 UTC 2011 - crrodriguez@opensuse.org
1109
1110
- Update snapshot, more static analyzer fixes. 
1111
1112
-------------------------------------------------------------------
1113
Sun Aug  7 20:32:28 UTC 2011 - crrodriguez@opensuse.org
1114
1115
- Update snapshot, fix converity warnings 
1116
1117
-------------------------------------------------------------------
1118
Fri Aug  5 03:00:45 UTC 2011 - crrodriguez@opensuse.org
1119
1120
- Update snapshot, several check if malloc() succeeded.
1121
1122
-------------------------------------------------------------------
1123
Wed Aug  3 17:51:56 UTC 2011 - crrodriguez@opensuse.org
1124
1125
- Fix build in Factory 
1126
- Fix Segfault with allow_call_time_pass_reference = Off
1127
- Using class constants in array definition fails
1128
1129
-------------------------------------------------------------------
1130
Mon Aug  1 16:38:57 UTC 2011 - crrodriguez@opensuse.org
1131
1132
- Add sqlite3 session storage, this is no more than
1133
  a forward port of already existent sqlite2 backend
1134
1135
-------------------------------------------------------------------
1136
Sun Jul 31 16:06:16 UTC 2011 - crrodriguez@opensuse.org
1137
1138
- Update snap, PHP 5.3.7-RC4 
1139
1140
-------------------------------------------------------------------
1141
Wed Jul 27 04:36:37 UTC 2011 - crrodriguez@opensuse.org
1142
1143
- Update snapshot again. 
1144
1145
-------------------------------------------------------------------
1146
Sat Jul 23 18:27:26 UTC 2011 - crrodriguez@opensuse.org
1147
1148
- Update snapshot. 
1149
1150
-------------------------------------------------------------------
1151
Thu Jul 14 04:42:23 UTC 2011 - crrodriguez@opensuse.org
1152
1153
- is_a() function is throwing an annoying warning 
1154
  "Unknown class passed as parameter" which is noticeable when
1155
  you use PEAR, fix it, if your code uses it you should be
1156
  using the instanceof operator anyway.
1157
- Update bundled pear.
1158
1159
-------------------------------------------------------------------
1160
Mon Jul 11 18:25:52 UTC 2011 - crrodriguez@opensuse.org
1161
1162
- Crash in gc_remove_zval_from_buffer CVE-NO-NAME
1163
- Crash in zend_mm_check_ptr // Heap corruption
1164
1165
-------------------------------------------------------------------
1166
Wed Jul  6 18:55:15 UTC 2011 - crrodriguez@opensuse.org
1167
1168
- Fixed missing Expires and Cache-Control headers for ping and status pages 
1169
- fix crypt() issue with overlong salt
1170
- Fixed bug #52935 (call exit in user_error_handler cause stream relate core).
1171
1172
-------------------------------------------------------------------
1173
Mon Jun 27 04:12:25 UTC 2011 - crrodriguez@opensuse.org
1174
1175
- Fix crash in error_log (strlen with NULL)
1176
- Fixed exit at FPM startup on fpm_resources_prepare
1177
- Added master rlimit_files and rlimit_core
1178
- Removed pid in debug logs written by chrildren processes
1179
- Replaced shm_slots with a real scoreboard 
1180
1181
-------------------------------------------------------------------
1182
Wed Jun 22 21:05:07 UTC 2011 - crrodriguez@opensuse.org
1183
1184
- Enable mysqlnd compression protocol. 
1185
1186
-------------------------------------------------------------------
1187
Thu Jun 16 19:24:49 UTC 2011 - crrodriguez@opensuse.org
1188
1189
- Update snapshot to 5.3.7 RC1  
1190
1191
-------------------------------------------------------------------
1192
Tue Jun 14 17:10:52 UTC 2011 - crrodriguez@opensuse.org
1193
1194
- Allow bison 2.5
1195
-File path injection vulnerability in RFC1867 File upload CVE-2011-2202.
1196
1197
-------------------------------------------------------------------
1198
Fri Jun 10 21:25:59 UTC 2011 - crrodriguez@opensuse.org
1199
1200
- Update 5.3 snap 
1201
- Fix compiler failure that happended after compile error.
1202
- Stream not closed and error not returned when SSL CN_match fails.
1203
1204
-------------------------------------------------------------------
1205
Mon Jun  6 23:08:38 UTC 2011 - crrodriguez@opensuse.org
1206
1207
- Update 5.3 snap 
1208
- Update bundled PEAR 
1209
- Case discrepancy in timezone names cause Uncaught exception and fatal error.
1210
- SEEK_CUR with 0 value, returns a warning
1211
- Restore fix: do not accept paths with NULL in them
1212
1213
-------------------------------------------------------------------
1214
Fri Jun  3 16:35:22 UTC 2011 - crrodriguez@opensuse.org
1215
1216
- Update to version 5.3.6.201106031621
1217
- Crash when calling call_user_func with unknown function name
1218
- Fixed double registering of browscap ini directive
1219
1220
-------------------------------------------------------------------
1221
Sun May 29 20:12:46 UTC 2011 - crrodriguez@opensuse.org
1222
1223
- Drop Update alternatives usage, there are no alternatives
1224
 PHP4 is gone and PHP6 is not coming at any time soon. 
1225
- Remove "mm" support from session module, virtually nothing
1226
  uses it and it doesnt support proper locking, mount 
1227
  /var/lib/php5 in tmpfs instead.
1228
1229
-------------------------------------------------------------------
1230
Sun May 29 17:10:52 UTC 2011 - crrodriguez@opensuse.org
1231
1232
- Update to 5.3.6.201105291701
1233
* Fixes random crash with apache2 SAPI and php_admin_value 
1234
  in virtualhost configuration.
1235
1236
-------------------------------------------------------------------
1237
Fri May 20 02:52:34 UTC 2011 - crrodriguez@opensuse.org
1238
1239
- Update 5.3 branch 
1240
- Fix a few memory leaks
1241
- Check if tempfile can be created in phar extension
1242
- Fix problems with __halt_compiler and imported namespaces
1243
- Properly handle out of memory conditions in mysqlnd
1244
1245
-------------------------------------------------------------------
1246
Sat May 14 17:59:07 UTC 2011 - crrodriguez@opensuse.org
1247
1248
- Update 5.3 branch.
1249
- Fix user after free in xmlreader extension.
1250
1251
-------------------------------------------------------------------
1252
Mon May  9 01:16:17 UTC 2011 - crrodriguez@opensuse.org
1253
1254
- Update to current 5.3 svn version. 
1255
- For practical reasons now the hash extension is built-in,hence
1256
  deprecates package php5-hash, it is nowdays required by the session
1257
  and phar extensions but must be statically built to work.
1258
- Drop php5-session patch, needed only to workaround compile 
1259
  failure when hash extension is built as loadable extension.
1260
- php.ini now clearly says that by "3" in session.hash_function
1261
  we mean SHA256.
1262
1263
-------------------------------------------------------------------
1264
Fri Apr 29 03:33:41 UTC 2011 - crrodriguez@opensuse.org
1265
1266
- Update to a recent 5.3.x SVN version, mostly bug fixes 
1267
 * track_errors causes segfault
1268
 * classes from dl()'ed extensions are not destroyed
1269
 * Crash when assigning value to a dimension in a non-array
1270
 * use-after-free in substr_replace()
1271
1272
-------------------------------------------------------------------
1273
Wed Apr 13 23:39:33 UTC 2011 - crrodriguez@opensuse.org
1274
1275
- fix crash on destruction.
1276
- allow openssl extension to be built w/o SSLv2 
1277
1278
-------------------------------------------------------------------
1279
Tue Apr  5 06:41:50 UTC 2011 - lang@b1-systems.de
1280
1281
- Add a default to date.timezone  because php5 warns that this is a required setting and clutters up the output in zypper installations of pear packages and other places
1282
- Versions after 5.3.6 may make this fatal
1283
1284
-------------------------------------------------------------------
1285
Sat Apr  2 00:52:57 UTC 2011 - crrodriguez@opensuse.org
1286
1287
- Intl extension failed to load [bnc#659868]
1288
- Fix update-alternatives usage,will be dropped in the future. 
1289
1290
-------------------------------------------------------------------
1291
Mon Mar 28 20:46:25 UTC 2011 - sbutler1@illinois.edu
1292
1293
- Add tcpd-devel for building the SNMP extension on SLE_10 and apache_server_SLE_10.
1294
1295
-------------------------------------------------------------------
1296
Thu Mar 17 17:07:26 UTC 2011 - crrodriguez@opensuse.org
1297
1298
- Update to php 5.3.6 final
1299
* Enforce security in the fastcgi protocol parsing with fpm SAPI.
1300
* Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153)
1301
* Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092)
1302
* Fixed bug #54055 (buffer overrun with high values for precision ini setting).
1303
* Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708)
1304
* Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421) 
1305
1306
-------------------------------------------------------------------
1307
Wed Mar 16 03:49:41 UTC 2011 - crrodriguez@opensuse.org
1308
1309
- Upgrade to PHP 5.3.6.RC3 
1310
 * Drop obsoleted patches
1311
 * fix some rpmlint warnings
1312
 * Hundreds of changes, see NEWS for details
1313
1314
-------------------------------------------------------------------
1315
Wed Mar  9 23:57:21 UTC 2011 - crrodriguez@opensuse.org
1316
1317
- Fix more date in binaries causing pointless republish of pkgs.
1318
1319
-------------------------------------------------------------------
1320
Fri Feb 25 09:50:17 UTC 2011 - chris@computersalat.de
1321
1322
- fix for macros.php
1323
  o devel pkg must have Obsoletes/Provides: php-macros
1324
1325
-------------------------------------------------------------------
1326
Tue Feb 22 11:22:52 CET 2011 - pgajdos@suse.cz
1327
1328
- security fixes
1329
  * CVE-2011-0420 [bnc#672933]
1330
  * CVE-2011-0708 [bnc#671710]
1331
1332
-------------------------------------------------------------------
1333
Thu Feb 10 17:06:50 UTC 2011 - chris@computersalat.de
1334
1335
- extend macros.php
1336
  o __php, __phpize, __php_config, php_version
1337
  o __pear, php_peardir, php_pearxmldir
1338
  o php_pear_gen_filelist
1339
- add README.macros
1340
1341
-------------------------------------------------------------------
1342
Thu Jan 13 17:20:40 CET 2011 - pgajdos@suse.cz
1343
1344
- security fix: 
1345
  * fopen_https_proxy_auth_fix.patch [bnc#656523]
1346
1347
-------------------------------------------------------------------
1348
Mon Jan 10 18:52:45 UTC 2011 - cristian.rodriguez@opensuse.org
1349
1350
- export PHP_MYSQLND_ENABLED=yes to solve the mysqlnd problem
1351
 when extensions are built shared. [bnc#661464]
1352
1353
-------------------------------------------------------------------
1354
Mon Jan 10 15:31:19 UTC 2011 - cristian.rodriguez@opensuse.org
1355
1356
- Go back to libmysql as there is currently no way
1357
  to build shared mysql extensions with mysqlnd. [bnc#661464]
1358
1359
-------------------------------------------------------------------
1360
Sun Jan  9 01:32:33 UTC 2011 - cristian.rodriguez@opensuse.org
1361
1362
- Use mysqlnd driver, this is a newer PHP-native mysql 
1363
  extension, that does not require external libraries.
1364
  Now you can use mysql, mariadb or drizzle without extra libs.
1365
  fixes bnc #661464 and other old feature requests.
1366
1367
-------------------------------------------------------------------
1368
Thu Jan  6 22:44:12 UTC 2011 - cristian.rodriguez@opensuse.org
1369
1370
- Update to version 5.3.5, Critical Update
1371
* Fixed bug #53632 (PHP hangs on numeric value 2.2250738585072011e-308). (CVE-2010-4645)
1372
  Only 32 bit binaries affected, confirmed in factory i586.
1373
1374
-------------------------------------------------------------------
1375
Fri Dec 17 21:37:18 UTC 2010 - cristian.rodriguez@opensuse.org
1376
1377
- revert unsuitable patch php-5.3.4-dlopen.patch
1378
1379
-------------------------------------------------------------------
1380
Tue Dec 14 23:19:26 UTC 2010 - cristian.rodriguez@opensuse.org
1381
1382
- Add  php-5.3.4-dlopen.patch from fedora,makes dlopen to use
1383
  bind_now instead of lazy.
1384
- Compiler is now in C99 mode for both core and extensions. 
1385
1386
-------------------------------------------------------------------
1387
Tue Dec 14 01:08:07 UTC 2010 - cristian.rodriguez@opensuse.org
1388
1389
- fix format string bug in Phar extension I just found
1390
  http://bugs.php.net/bug.php?id=53541 and the underlying
1391
  issue, which is the lack of format attributes in several
1392
  core prototypes.
1393
1394
-------------------------------------------------------------------
1395
Mon Dec 13 01:53:50 UTC 2010 - cristian.rodriguez@opensuse.org
1396
1397
- Update to PHP 5.3.4 final
1398
* Fixed crash in zip extract method (possible CWE-170).
1399
* Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
1400
* Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
1401
* Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
1402
* Fixed possible flaw in open_basedir (CVE-2010-3436).
1403
* Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
1404
* Fixed symbolic resolution support when the target is a DFS share.
1405
* Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
1406
* Key Bug Fixes in PHP 5.3.4 include:
1407
* Added stat support for zip stream.
1408
* Added follow_location (enabled by default) option for the http stream support.
1409
* Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
1410
* Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
1411
* Multiple improvements to the FPM SAPI.
1412
* Over 100 other bug fixes. 
1413
- SUSE specific;
1414
* enable PTY support in proc_open (temporary)
1415
1416
-------------------------------------------------------------------
1417
Wed Nov 24 01:47:31 CET 2010 - ro@suse.de
1418
1419
- xft-config is gone 
1420
1421
-------------------------------------------------------------------
1422
Tue Nov  2 02:23:00 UTC 2010 - cristian.rodriguez@opensuse.org
1423
1424
- Update to 5.3.3_svn201011020214
1425
* Fix Performance issue, array_diff may take hours instead
1426
  of seconds in some scenarios,regression appeared in version
1427
  5.2.5 
1428
1429
-------------------------------------------------------------------
1430
Wed Oct 27 22:09:03 UTC 2010 - cristian.rodriguez@opensuse.org
1431
1432
- Update to 5.3.3_svn20101027xx
1433
- Fix init script again. 
1434
1435
-------------------------------------------------------------------
1436
Thu Oct 14 03:36:44 UTC 2010 - crrodriguez@opensuse.org
1437
1438
- update to 5.3.3_svn201010140300
1439
- Fix php-fpm init script. 
1440
1441
-------------------------------------------------------------------
1442
Sat Oct  9 16:20:10 UTC 2010 - cristian.rodriguez@opensuse.org
1443
1444
- Update to an slightly newer PHP 5.3.3.x snap, fixes
1445
  around 100 bugs including open_basedir problems.
1446
- add the fpm sapi to the package. 
1447
1448
-------------------------------------------------------------------
1449
Tue Aug  3 04:36:49 UTC 2010 - cristian.rodriguez@opensuse.org
1450
1451
- Clarify changelog this update fixed:
1452
  * VUL-0: php5 new unserialize() flaw CVE-2010-2225 [bnc#616232]
1453
  * VUL-0: php5: MOPS-2010-021: fnmatch() Stack Exhaustion Vulnerability [bnc#605097]
1454
  * VUL-0: php5: MOPS-2010-017: preg_quote() Interruption Information Leak [bnc#605100]
1455
  * VUL-0: php5: MOPS-2010-022 use after free [bnc#609763]
1456
  * VUL-0: php5-phar: MOPS-2010-0{24,25,26,27,28} format string bugs [bnc#609766]
1457
  * VUL-0: php5: MOPS-2010-0{32,33,34} use space interruption in iconv functions [bnc#609768]
1458
  * VUL-0: php5: MOPS-2010-0{36,37,38,39,40} userspace interruptions [bnc#609769]
1459
  * VUL-0: php5: MOPS-2010-0{36..46} userspace interruptions [bnc#609769]
1460
  * VUL-0: php5: MOPS-2010-047/048 information leak [bnc#612555]
1461
  * VUL-0: php5: MOPS-2010-049/50/51/52/53/54/55 memory corruption and/or info leak [bnc#612556]
1462
  * VUL-0: PHP5: Session Data Injection Vulnerability [bnc#619483]
1463
  * VUL-0: PHP5: multiple heap based buffer overflows [bnc#619486]
1464
  * bugzilla numbers 619487,619489,619469,609766..
1465
1466
-------------------------------------------------------------------
1467
Tue Jul 20 03:15:19 UTC 2010 - cristian.rodriguez@opensuse.org
1468
1469
- Update to PHP 5.3.3 RC3
1470
- Massive lot of security fixes see list 
1471
  here http://www.php-security.org/category/vulnerabilities/index.html 
1472
1473
-------------------------------------------------------------------
1474
Tue Jun  1 16:32:20 UTC 2010 - cristian.rodriguez@opensuse.org
1475
1476
- possible fix for [bnc#610633] 
1477
1478
-------------------------------------------------------------------
1479
Fri Apr 16 15:51:49 UTC 2010 - crrodriguez@opensuse.org
1480
1481
- use FD_CLOEXEC flag to avoid annoying races.
1482
1483
-------------------------------------------------------------------
1484
Sun Apr  4 12:43:07 UTC 2010 - crrodriguez@opensuse.org
1485
1486
- remove obsolete buildRequires 
1487
1488
-------------------------------------------------------------------
1489
Fri Apr  2 14:59:46 UTC 2010 - crrodriguez@opensuse.org
1490
1491
- remove build date from binaries so they dont get
1492
   republished every time
1493
- fix invalid path 
1494
1495
-------------------------------------------------------------------
1496
Thu Apr  1 22:03:47 UTC 2010 - crrodriguez@opensuse.org
1497
1498
-  add missing patch, refresh patches with -p0
1499
1500
-------------------------------------------------------------------
1501
Thu Apr  1 21:38:12 UTC 2010 - crrodriguez@opensuse.org
1502
1503
- Update to PHP 5.3.2, see NEWS for details
1504
1505
-------------------------------------------------------------------
1506
Fri Mar  5 23:06:10 UTC 2010 - dimstar@opensuse.org
1507
1508
- Add php5-autoconf-2.65.patch to fix build with autoconf 2.65; it's
1509
  a backported combination of svn commits 291283, 291284 and
1510
  291332.
1511
- Workaround old php bug http://bugs.php.net/bug.php?id=21153 by
1512
  replacing -ledit with -ledit -lncurses in the resulting configure
1513
  scripts. This became apparent problem due to libedit being built
1514
  with as-needed now.
1515
- Add php5-bug51224.patch to fix buffer overflows happening in
1516
  strcpy. It;s a combination of upstream svn revs 284097 and 284099
1517
1518
-------------------------------------------------------------------
1519
Sun Jan 17 16:47:17 CET 2010 - vuntz@opensuse.org
1520
1521
- Remove unneeded gtk-devel BuildRequires.
1522
1523
-------------------------------------------------------------------
1524
Mon Jan 11 13:36:50 UTC 2010 - aj@suse.de
1525
1526
- Remove obsolete build requires of orbit-devel.
1527
1528
-------------------------------------------------------------------
1529
Tue Dec 22 18:36:04 CET 2009 - jengelh@medozas.de
1530
1531
- avoid alignment crash on alignment-sensitive CPUs
1532
  (bugs.php.net#46074)
1533
1534
-------------------------------------------------------------------
1535
Wed Dec  2 18:27:41 UTC 2009 - coolo@novell.com
1536
1537
- update patch to fix build
1538
1539
-------------------------------------------------------------------
1540
Tue Oct  6 21:56:32 UTC 2009 - crrodriguez@opensuse.org
1541
1542
- Fixed wrong harcoded mysql socket  [bnc#544516]
1543
- Fixed wrong default include_path
1544
1545
-------------------------------------------------------------------
1546
Tue Sep  8 13:20:55 CEST 2009 - crrodriguez@suse.de
1547
1548
- make php5-pear noarch in Factory 
1549
1550
-------------------------------------------------------------------
1551
Wed Aug 26 15:30:59 CEST 2009 - crrodriguez@suse.de
1552
1553
- remove obsolete patches
1554
- apply ini patch
1555
- enable mhash compatibility in the hash extension and obsolete php5-mhash
1556
- add macros.php to the source list
1557
1558
-------------------------------------------------------------------
1559
Mon Aug 24 02:53:28 CEST 2009 - crrodriguez@suse.de
1560
1561
- PHP read_exif_data() only returns the first letter of UTF-16 strings [bnc#518300] 
1562
1563
-------------------------------------------------------------------
1564
Sun Aug 23 23:03:49 CEST 2009 - crrodriguez@suse.de
1565
1566
- fix missing return values of suhosin extension 
1567
1568
-------------------------------------------------------------------
1569
Thu Aug 20 00:03:39 CEST 2009 - crrodriguez@novell.com
1570
1571
- fix build on CODE10 products 
1572
1573
-------------------------------------------------------------------
1574
Wed Aug 19 23:45:26 CEST 2009 - crrodriguez@novell.com
1575
1576
- fix horrible broken open_basedir functionality 
1577
1578
-------------------------------------------------------------------
1579
Sun Aug 16 16:19:19 CEST 2009 - crrodriguez@suse.de
1580
1581
- update suhosin extension to version 0.9.29
1582
- mysql extensions now use mysqlnd instead of libmysqlclient.
1583
- enable sqlite3 extension, part of the php5-sqlite package
1584
- enable enchant extension
1585
- enable fileinfo extension
1586
- enable intl extension
1587
1588
-------------------------------------------------------------------
1589
Fri Aug 14 23:57:25 CEST 2009 - crrodriguez@suse.de
1590
1591
- add suhosin patch and newer suhosin extension for compatibility
1592
  reasons 
1593
1594
-------------------------------------------------------------------
1595
Thu Aug 13 21:23:57 CEST 2009 - crrodriguez@suse.de
1596
1597
-  Upgrade to PHP 5.3, see http://www.php.net/ChangeLog-5.php
1598
   for the huge list of changes
1599
-  remove dbase and ncurses extension
1600
1601
-------------------------------------------------------------------
1602
Thu Jul 16 15:44:47 CEST 2009 - coolo@novell.com
1603
1604
- disable as-needed to fix build
1605
1606
1607
-------------------------------------------------------------------
1608
Fri Jun 19 14:06:27 CEST 2009 - crrodriguez@suse.de
1609
1610
- update to PHP 5.2.10
1611
    *Fixed bug #48378 (exif_read_data() segfaults on certain corrupted .jpeg files)
1612
    * Added "ignore_errors" option to http fopen wrapper. (David Zulke, Sara)
1613
    * Fixed memory corruptions while reading properties of zip files. (Ilia)
1614
    * Fixed memory leak in ob_get_clean/ob_get_flush. (Christian)
1615
    * Fixed segfault on invalid session.save_path. (Hannes)
1616
    * Fixed leaks in imap when a mail_criteria is used. (Pierre)
1617
    * Changed default value of array_unique()'s optional sorting type parameter back to SORT_STRING to fix backwards compatibility breakage introduced in PHP 5.2.9. (Moriyoshi)
1618
    * Fixed bug #47940 (memory leaks in imap_body). (Pierre, Jake Levitt)
1619
    * Fixed bug #47903 ("@" operator does not work with string offsets). (Felipe)
1620
    * Fixed bug #47644 (Valid integers are truncated with json_decode()). (Scott)
1621
    * Fixed bug #47564 (unpacking unsigned long 32bit big endian returns wrong result). (Ilia)
1622
    * Fixed bug #47365 (ip2long() may allow some invalid values on certain 64bit systems).
1623
    * Over 100 bug fixes.
1624
 
1625
-------------------------------------------------------------------
1626
Thu May 21 22:29:41 CEST 2009 - crrodriguez@suse.de
1627
1628
- add temporary backport of openssl prng function 
1629
1630
-------------------------------------------------------------------
1631
Sat Mar 14 18:38:21 CET 2009 - crrodriguez@suse.de
1632
1633
- Update to version 5.2.9, security and bugfix release
1634
  * VUL-0: php5: memory disclosure by imagerotate() [bnc#480850]
1635
  * VUL-0: php5: mbstring.func_overload set in .htaccess becomes global [bnc#471419]
1636
  * Fixed a segfault when malformed string is passed to json_decode()
1637
  * Fixed explode() behavior with empty string to respect negative limit.  
1638
1639
-------------------------------------------------------------------
1640
Sun Dec 14 16:55:52 CET 2008 - crrodriguez@suse.de
1641
1642
- remove ming extension, moved to server:php:extensions later 
1643
1644
-------------------------------------------------------------------
1645
Tue Dec  9 05:50:38 CET 2008 - crrodriguez@suse.de
1646
1647
- Update to PHP 5.2.8 
1648
1649
-------------------------------------------------------------------
1650
Mon Dec  8 17:30:53 CET 2008 - crrodriguez@suse.de
1651
1652
- fix BLOCKER magic_quotes breakage, if your code
1653
  relies on this feature, it is broken,time to press the panic button. 
1654
1655
-------------------------------------------------------------------
1656
Fri Dec  5 16:26:42 CET 2008 - crrodriguez@suse.de
1657
1658
- update to PHP 5.2.7 final, no mayor changes since RC5 
1659
1660
-------------------------------------------------------------------
1661
Fri Nov 28 15:26:15 CET 2008 - crrodriguez@suse.de
1662
1663
- update to PHP 5.2.7RC5 see news for details 
1664
1665
-------------------------------------------------------------------
1666
Fri Nov 21 02:22:25 CET 2008 - crrodriguez@suse.de
1667
1668
- update to PHP 5.2.7RC4, see news for details 
1669
1670
-------------------------------------------------------------------
1671
Sun Nov 16 04:43:25 CET 2008 - crrodriguez@suse.de
1672
1673
- update to PHP 5.2.7RC3, see NEWS for details 
1674
1675
-------------------------------------------------------------------
1676
Mon Sep  8 10:38:25 CEST 2008 - crrodriguez@suse.de
1677
1678
- update suhosin to version 0.9.27
1679
    * Fixed problem with suhosin.perdir
1680
      Thanks to Hosteurope for tracking this down
1681
    * Fixed problems with ext/uploadprogress
1682
      Reported by: Christian Stocker
1683
    * Added suhosin.srand.ignore and suhosin.mt_srand.ignore (default: on)
1684
    * Modified rand()/srand() to use the Mersenne Twister algorithm with separate state
1685
    * Added better internal seeding of rand() and mt_rand()
1686
1687
-------------------------------------------------------------------
1688
Mon Jul 14 00:14:13 CEST 2008 - crrodriguez@suse.de
1689
1690
- merge patches from schwab 
1691
1692
-------------------------------------------------------------------
1693
Fri May  2 10:12:59 CEST 2008 - crrodriguez@suse.de
1694
1695
- update to PHP 5.2.6
1696
   * Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.
1697
   * Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
1698
   * Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
1699
   * Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
1700
   * Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.
1701
   * Fixed two possible crashes inside the posix extension.
1702
   * Fixed bug #44069 (Huge memory usage with concatenation using . instead of .=)
1703
   * Fixed bug #44141 (private parent constructor callable through static function).
1704
   * Fixed bug #43589 (a possible infinite loop in bz2_filter.c).
1705
   * Fixed bug #43450 (Memory leak on some functions with implicit object __toString() call).
1706
   * Fixed bug #43201 (Crash on using uninitialized vals and __get/__set).
1707
   * Fixed bug #42978 (mismatch between number of bound params and values causes a crash in pdo_pgsql).
1708
   * Fixed bug #42937 (__call() method not invoked when methods are called on parent from child class).
1709
   * Fixed bug #42736 (xmlrpc_server_call_method() crashes).
1710
   * Fixed bug #42369 (Implicit conversion to string leaks memory).
1711
   * Fixed bug #41562 (SimpleXML memory issue).
1712
   * Fixed bug #43606 (define missing depencies of the exif extension). (crrodriguez at suse dot de)
1713
   * Fixed bug #43498 (file_exists() on a proftpd server got SIZE not allowed in ASCII mode). (Ilia, crrodriguez at suse dot de)
1714
   * Over 120 bug fixes.
1715
1716
-------------------------------------------------------------------
1717
Wed Feb  6 00:37:17 CET 2008 - crrodriguez@suse.de
1718
1719
- update suhosin extension to version 0.9.23 
1720
- Fixed suhosin extension now compiles with snapshots of PHP 5.3
1721
- Fixed crypt() behaves like normal again when there is no salt supplied
1722
- wrong Obsoletes causes upgrade trouble [bnc #355618]
1723
1724
-------------------------------------------------------------------
1725
Fri Feb  1 10:47:45 CET 2008 - mmarek@suse.cz
1726
1727
- use %%_with_ming and %%_with_qdbm instead of %%opensuse_bs,
1728
  enables building in the bs in other projects than server:php
1729
  (bnc#357917)
1730
1731
-------------------------------------------------------------------
1732
Fri Jan 11 08:06:38 CET 2008 - crrodriguez@suse.de
1733
1734
- Try patch recently published by Redhat that allows PHP to
1735
  use the system timezone database instead of the bundled one.
1736
1737
-------------------------------------------------------------------
1738
Mon Jan  7 07:07:53 CET 2008 - crrodriguez@suse.de
1739
1740
- Do not hard require php5-timezonedb, instead provide a capability
1741
  php(tzdatabase) = builtin_tz_ver so it gets installed via rpm
1742
  Supplements only when needed.
1743
1744
-------------------------------------------------------------------
1745
Thu Dec 27 08:10:15 CET 2007 - crrodriguez@suse.de
1746
1747
- PHP is leaking file descriptors badly on relative includes 
1748
  (php-5.2.5-fdleak.patch) 
1749
1750
1751
-------------------------------------------------------------------
1752
Thu Dec 13 05:35:08 CET 2007 - crrodriguez@suse.de
1753
1754
- suhosin 0.9.22
1755
  - Fixed function_exists() now checks the Suhosin permissions
1756
  - Fixed crypt() salt no longer uses Blowfish by default
1757
  - Fixed .htaccess/perdir support
1758
  - Fixed compilation problem on OS/X
1759
  - Added protection against some attacks through _SERVER variables
1760
  - Added suhosin.server.strip and suhosin.server.encode
1761
 
1762
1763
-------------------------------------------------------------------
1764
Tue Dec 11 06:37:03 CET 2007 - crrodriguez@suse.de
1765
1766
- use /dev/urandom for generating session-IDs [#337005]
1767
- L3: PHP: Venezuela Time Zone Update starting date changed to December 9 [#345548] 
1768
1769
-------------------------------------------------------------------
1770
Mon Nov 12 06:40:39 CET 2007 - crrodriguez@suse.de
1771
1772
- update to PHP 5.2.5
1773
  * Fixed dl() to only accept filenames. reported by Laurent Gaffie.
1774
  * Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887).
1775
  * Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences.
1776
  * Fixed possible triggering of buffer overflows inside glibc implementations of the fnmatch(), setlocale() and glob() functions. Reported by Laurent Gaffie.
1777
  * Fixed "mail.force_extra_parameters" php.ini directive not to be modifiable in .htaccess due to the security implications reported by SecurityReason.
1778
  * Fixed bug #42869 (automatic session id insertion adds sessions id to non-local forms).
1779
  * Fixed bug #41561 (Values set with php_admin_* in httpd.conf can be overwritten with ini_set()).
1780
  * Upgraded PCRE to version 7.3 (Nuno)
1781
  * Added optional parameter $provide_object to debug_backtrace(). (Sebastian)
1782
  * Added alpha support for imagefilter() IMG_FILTER_COLORIZE. (Pierre)
1783
  * Added ability to control memory consumption between request using ZEND_MM_COMPACT environment variable. (Dmitry)
1784
  * Improved speed of array_intersect_key(), array_intersect_assoc(), array_uintersect_assoc(), array_diff_key(), array_diff_assoc() and array_udiff_assoc(). (Dmitry)
1785
  * Fixed move_uploaded_file() to always set file permissions of resulting file according to UMASK. (Andrew Sitnikov)
1786
  * Fixed possible crash in ext/soap because of uninitialized value. (Zdash Urf)
1787
  * Fixed regression in glob() when enforcing safe_mode/open_basedir checks on paths containing '*'. (Ilia)
1788
  * Fixed PDO crash when driver returns empty LOB stream. (Stas)
1789
  * Fixed iconv_*() functions to limit argument sizes as workaround to libc bug (CVE-2007-4783, CVE-2007-4840 by Laurent Gaffie). (Christian Hoffmann, Stas)
1790
  * Fixed missing brackets leading to build warning and error in the log. Win32 code. (Andrey)
1791
  * Fixed leaks with multiple connects on one mysqli object. (Andrey)
1792
  * Fixed imagerectangle regression with 1x1 rectangle (libgd #106). (Pierre)
1793
  * Fixed bug #43196 (array_intersect_assoc() crashes with non-array input). (Jani)
1794
  * Fixed bug #43139 (PDO ignores ATTR_DEFAULT_FETCH_MODE in some cases with fetchAll()). (Ilia)
1795
  * Fixed bug #43137 (rmdir() and rename() do not clear statcache). (Jani)
1796
  * Fixed bug #43130 (Bound parameters cannot have - in their name). (Ilia)
1797
  * Fixed bug #43099 (XMLWriter::endElement() does not check # of params). (Ilia)
1798
  * Fixed bug #43020 (Warning message is missing with shuffle() and more than one argument). (Scott)
1799
  * Fixed bug #42976 (Crash when constructor for newInstance() or newInstanceArgs() fails) (Ilia)
1800
  * Fixed bug #42917 (PDO::FETCH_KEY_PAIR doesn't work with setFetchMode). (Ilia)
1801
  * Fixed bug #42890 (Constant "LIST" defined by mysqlclient and c-client). (Andrey)
1802
  * Fixed bug #42818 ($foo = clone(array()); leaks memory). (Dmitry)
1803
  * Fixed bug #42817 (clone() on a non-object does not result in a fatal error). (Ilia)
1804
  * Fixed bug #42785 (json_encode() formats doubles according to locale rather then following standard syntax). (Ilia)
1805
  * Fixed bug #42783 (pg_insert() does not accept an empty list for insertion). (Ilia)
1806
  * Fixed bug #42773 (WSDL error causes HTTP 500 Response). (Dmitry)
1807
  * Fixed bug #42772 (Storing $this in a static var fails while handling a cast to string). (Dmitry)
1808
  * Fixed bug #42767 (highlight_string() truncates trailing comment). (Ilia)
1809
  * Fixed bug #42739 (mkdir() doesn't like a trailing slash when safe_mode is enabled). (Ilia)
1810
  * Fixed bug #42703 (Exception raised in an iterator::current() causes segfault in FilterIterator) (Marcus)
1811
  * Fixed bug #42699 (PHP_SELF duplicates path). (Dmitry)
1812
  * Fixed bug #42654 (RecursiveIteratorIterator modifies only part of leaves) (Marcus)
1813
  * Fixed bug #42643 (CLI segfaults if using ATTR_PERSISTENT). (Ilia)
1814
  * Fixed bug #42637 (SoapFault : Only http and https are allowed). (Bill Moran)
1815
  * Fixed bug #42627 (bz2 extension fails to build with -fno-common). (dolecek at netbsd dot org)
1816
  * Fixed bug #42596 (session.save_path MODE option does not work). (Ilia)
1817
  * Fixed bug #42590 (Make the engine recognize \v and \f escape sequences). (Ilia)
1818
  * Fixed bug #42587 (behavior change regarding symlinked .php files). (Dmitry)
1819
  * Fixed bug #42579 (apache_reset_timeout() does not exist). (Jani)
1820
  * Fixed bug #42549 (ext/mysql failed to compile with libmysql 3.23). (Scott)
1821
  * Fixed bug #42523 (PHP_SELF duplicates path). (Dmitry)
1822
  * Fixed bug #42512 (ip2long('255.255.255.255') should return 4294967295 on 64-bit PHP). (Derick)
1823
  * Fixed bug #42506 (php_pgsql_convert() timezone parse bug) (nonunnet at gmail dot com, Ilia)
1824
  * Fixed bug #42462 (Segmentation when trying to set an attribute in a DOMElement). (Rob)
1825
  * Fixed bug #42453 (CGI SAPI does not shut down cleanly with -i/-m/-v cmdline options). (Dmitry)
1826
  * Fixed bug #42452 (PDO classes do not expose Reflection API information). (Hannes)
1827
  * Fixed bug #42468 (Write lock on file_get_contents fails when using a compression stream). (Ilia)
1828
  * Fixed bug #42488 (SoapServer reports an encoding error and the error itself breaks). (Dmitry)
1829
  * Fixed bug #42378 (mysqli_stmt_bind_result memory exhaustion). (Andrey)
1830
  * Fixed bug #42359 (xsd:list type not parsed). (Dmitry)
1831
  * Fixed bug #42326 (SoapServer crash). (Dmitry)
1832
  * Fixed bug #42214 (SoapServer sends clients internal PHP errors). (Dmitry)
1833
  * Fixed bug #42189 (xmlrpc_set_type() crashes php on invalid datetime values). (Ilia)
1834
  * Fixed bug #42139 (XMLReader option constants are broken using XML()). (Rob)
1835
  * Fixed bug #42086 (SoapServer return Procedure '' not present for WSIBasic compliant wsdl). (Dmitry)
1836
  * Fixed bug #41822 (Relative includes broken when getcwd() fails). (Ab5602, Jani)
1837
  * Fixed bug #39651 (proc_open() append mode doesn't work on windows). (Nuno) 
1838
1839
-------------------------------------------------------------------
1840
Thu Aug 30 03:52:35 CEST 2007 - crrodriguez@suse.de
1841
1842
- update to PHP 5.2.4, no relevant changes since RC3.
1843
1844
-------------------------------------------------------------------
1845
Fri Aug 24 11:11:41 CEST 2007 - crrodriguez@suse.de
1846
1847
- PHP 5.2.4RC3
1848
- Fixed version_compare() to support "rc" as well as "RC" for release
1849
  candidate version numbers.
1850
- Fixed bug #42368 (Incorrect error message displayed by pg_escape_string).
1851
  (Ilia)
1852
- Fixed phpbug #42365 and Novell bugzilla #292998 (glob() crashes and/or accepts way too many flags). (Jani)
1853
- Fixed bug #42183 (classmap causes crash in non-wsdl mode). (Dmitry)
1854
- Fixed bug #42009 (is_a() and is_subclass_of() should NOT call autoload,
1855
  in the same way as "instanceof" operator). (Dmitry)
1856
- Fixed bug #41904 (proc_open(): empty env array should cause empty
1857
  environment to be passed to process). (Jani)
1858
- Fixed bug #37273 (Symlinks and mod_files session handler allow open_basedir
1859
  bypass). (Ilia)
1860
- remove wrong hardcoded requirement on libedit
1861
- devel package at least does not need libtool the php build enviroment uses a private copy. 
1862
- drop no longer needed patches already in upstream
1863
1864
-------------------------------------------------------------------
1865
Fri Aug 17 14:46:08 CEST 2007 - anosek@suse.cz
1866
1867
- updated to version 5.2.4RC2
1868
  - Fixed oci8 and PDO_OCI extensions to allow configuring with Oracle 11g client
1869
    libraries. (Chris Jones)
1870
  - Fixed bug #42292 ($PHP_CONFIG not set for phpized builds). (Jani)
1871
  - Fixed bug #42261 (header wrong for date field). (roberto at spadim dot com
1872
    dot br, Ilia)
1873
  - Fixed bug #42259 (SimpleXMLIterator loses ancestry). (Rob)
1874
  - Fixed bug #42247 (ldap_parse_result() not defined under win32). (Jani)
1875
  - Fixed bug #42243 (copy() does not output an error when the first arg is a
1876
    dir). (Ilia)
1877
  - Fixed bug #42242 (sybase_connect() crashes). (Ilia)
1878
  - Fixed bug #42237 (stream_copy_to_stream returns invalid values for mmaped
1879
    streams). (andrew dot minerd at sellingsource dot com, Ilia)
1880
  - Fixed bug #42222 (possible buffer overflow in php_openssl_make_REQ). (Pierre)
1881
  - Fixed bug #42211 (property_exists() fails to find protected properties from
1882
    a parent class). (Dmitry)
1883
  - Fixed bug #42208 (substr_replace() crashes when the same array is passed
1884
    more than once). (crrodriguez at suse dot de, Ilia)
1885
  - Fixed bug #42198 (SCRIPT_NAME and PHP_SELF truncated when inside a userdir
1886
    and using PATH_INFO). (Dmitry)
1887
  - Fixed bug #42195 (C++ compiler required always). (Jani)
1888
  - Fixed bug #42117 (bzip2.compress loses data in internal buffer). (Philip,
1889
    Ilia)
1890
  - Fixed bug #42082 (NodeList length zero should be empty). (Hannes)
1891
  - Fixed bug #36492 (Userfilters can leak buckets). (Sara)
1892
  - Fixed bug #31892 (PHP_SELF incorrect without cgi.fix_pathinfo, but turning
1893
    on screws up PATH_INFO). (Dmitry) 
1894
1895
-------------------------------------------------------------------
1896
Mon Aug  6 19:28:46 CEST 2007 - anosek@suse.cz
1897
1898
- updated to version 5.2.4RC1
1899
- dropped obsoleted PHP_5_2-CVS-2007-07-30.patch.bz2
1900
1901
-------------------------------------------------------------------
1902
Mon Jul 30 15:31:19 CEST 2007 - mmarek@suse.cz
1903
1904
- updated to latest state of PHP_5_2 branch; highlights from the
1905
  NEWS file:
1906
  - Upgraded PCRE to version 7.2 (Nuno)
1907
  - Updated timezone database to version 2007.6. (Derick)
1908
  - Improved openssl_x509_parse() to return extensions in readable
1909
    form.  (Dmitry)
1910
  - Changed "display_errors" php.ini option to accept "stderr" as
1911
    value which makes the error messages to be outputted to STDERR
1912
    instead of STDOUT with CGI and CLI SAPIs (FR #22839). (Jani)
1913
  - Changed error handler to send HTTP 500 instead of blank page on
1914
    PHP errors.  (Dmitry, Andrei Nigmatulin)
1915
  - Added check for unknown options passed to configure. (Jani)
1916
  - Added persistent connection status checker to pdo_pgsql.
1917
    (Elvis Pranskevichus, Ilia)
1918
  - Added support for ATTR_TIMEOUT inside pdo_pgsql driver. (Ilia)
1919
  - Added php_ini_loaded_file() function which returns the path to
1920
    the actual php.ini in use. (Jani)
1921
  - Added GD version constants GD_MAJOR_VERSION, GD_MINOR_VERSION
1922
    GD_RELEASE_VERSION, GD_EXTRA_VERSION and GD_VERSION_STRING.
1923
    (Pierre)
1924
  - Added missing open_basedir checks to CGI.  (anight at
1925
    eyelinkmedia dot com, Tony)
1926
  - Added missing format validator to unpack() function. (Ilia)
1927
  - Added missing error check inside bcpowmod(). (Ilia)
1928
  - Added CURLOPT_PRIVATE & CURLINFO_PRIVATE constants.  (Andrey A.
1929
    Belashkov, Tony)
1930
  - Added missing MSG_EOR and MSG_EOF constants to sockets
1931
    extension. (Jani)
1932
  - Added PCRE_VERSION constant. (Tony)
1933
  - Added ReflectionExtension::info() function to print the
1934
    phpinfo() block for an extension. (Johannes)
1935
  - Implemented FR #41884 (ReflectionClass::getDefaultProperties()
1936
    does not handle static attributes). (Tony)
1937
  - plus lots of bugfixes
1938
- fixed the pear phar archive to run with 5.2.4
1939
  [http://bugs.php.net/bug.php?id=42146]
1940
1941
-------------------------------------------------------------------
1942
Wed Jul 25 10:11:15 CEST 2007 - mmarek@suse.cz
1943
1944
- added /var/lib/pear to php5-pear.rpm
1945
1946
-------------------------------------------------------------------
1947
Tue Jul 24 12:34:32 UTC 2007 - judas_iscariote@shorewall.net
1948
1949
- fix nasty deadlock in pear
1950
- update php5-ze2-fixes.patch and actually apply it. 
1951
1952
-------------------------------------------------------------------
1953
Tue Jul 17 07:52:46 CEST 2007 - anosek@suse.cz
1954
1955
- fixed YOU honors Recommends, breaks php update [#291551]
1956
  (moved php-suhosin from Recommends to Suggests) 
1957
1958
-------------------------------------------------------------------
1959
Mon Jun 25 12:07:56 CEST 2007 - mmarek@suse.cz
1960
1961
- provide /srv/www/cgi-bin/php5 compat symlink instead of patching
1962
  config files
1963
1964
-------------------------------------------------------------------
1965
Sat Jun 23 11:03:50 UTC 2007 - judas_iscariote@shorewall.net
1966
1967
- fixed a mess with update-alternatives PreReq uncovered by newer build versions. 
1968
  actually every subpackage that uses update-alternatives should PreReq it.
1969
- fix some ZE2 bugs.
1970
1971
-------------------------------------------------------------------
1972
Tue Jun 12 14:33:57 CEST 2007 - mmarek@suse.cz
1973
1974
- drop php5.xpm and the Icon: line from the specfile (the icon is
1975
  not used at all and it breaks rpm -q --specfile php5.spec)
1976
1977
-------------------------------------------------------------------
1978
Fri Jun  1 03:23:28 UTC 2007 - judas_iscariote@shorewall.net
1979
1980
- PHP version 5.2.3 see http://www.php.net/releases/5_2_3.php
1981
- important: PHP-cgi now lives in /usr, package attempts to fix both
1982
  lighttpd and apache2 fastcgi config files.
1983
-------------------------------------------------------------------
1984
Wed May 30 01:36:58 UTC 2007 - judas_iscariote@shorewall.net
1985
1986
- use system re2c in factory.
1987
- enable support for qbdm in the dba extension (build service only)
1988
- enable the ming extension (build service only) 
1989
1990
-------------------------------------------------------------------
1991
Mon May 21 12:00:45 CEST 2007 - mmarek@suse.cz
1992
1993
- fixed the dba extension adding -ldb-4.x to global LDFLAGS,
1994
  causing unnecessary dependency in /usr/bin/php5
1995
  [http://bugs.php.net/bug.php?id=41455]
1996
1997
-------------------------------------------------------------------
1998
Sat May 19 22:59:37 UTC 2007 - judas_iscariote@shorewall.net
1999
2000
- updated suhosin to version 0.9.20, security fix + bugfixes
2001
see http://www.hardened-php.net/suhosin/changelog.html for more detail.
2002
2003
-------------------------------------------------------------------
2004
Mon May 14 03:13:01 UTC 2007 - judas_iscariote@shorewall.net
2005
2006
- fix devel package, in the reality PHP does not currenly require expat.
2007
 headers provides a expat compatibility layer but it is no longer in use
2008
 by our packages as libxml2 is always prefered, (and HAVE_LIBEXPAT is not defined)
2009
2010
-------------------------------------------------------------------
2011
Fri May 11 13:22:29 UTC 2007 - judas_iscariote@shorewall.net
2012
2013
- update php5-test-fixes fixing another bug in zend_compile.c
2014
- use rpm macros in the spec file
2015
- when removing apache2-mod_php5, unload it from apache first.
2016
- when updating apache2-mod_php5 restart apache with restart on update macro.
2017
2018
-------------------------------------------------------------------
2019
Sun May  6 21:49:54 UTC 2007 - judas_iscariote@shorewall.net
2020
2021
- HTTP_RAW_POST_DATA superglobal broken (php5-phpbug-41293.patch)
2022
- better fix for MOPB 41.
2023
2024
-------------------------------------------------------------------
2025
Sat May  5 00:59:25 UTC 2007 - judas_iscariote@shorewall.net
2026
2027
- remove --enable-memory-limit configure flag, it disappeared in 5.2.1,
2028
        nowdays memory_limit is always enabled.
2029
2030
-------------------------------------------------------------------
2031
Fri May  4 13:16:05 CEST 2007 - prusnak@suse.cz
2032
2033
- changed expat to libexpat-devel in Requires of devel subpackage
2034
2035
-------------------------------------------------------------------
2036
Fri May  4 09:58:35 UTC 2007 - judas_iscariote@shorewall.net
2037
2038
- add php5-test-fixes.patch fixing a test case that wont pass on i586
2039
as well a real fix for Zend/tests/bug41117_1.phpt problem, that was commited
2040
after the release was done. there is another test case that fails in 10.2
2041
ext/pcre/tests/bug40195.phpt but this is not a PHP problem but a bug in PCRE.
2042
2043
- added missing fix for PMOPB-45-2007 PHP ext/filter Email Validation Vulnerability (minor)
2044
2045
-------------------------------------------------------------------
2046
Fri May  4 05:58:13 UTC 2007 - judas_iscariote@shorewall.net
2047
2048
- php5-devel package now requires pcre-devel for > 10.1 as 5.2.2 installs
2049
  php_pcre.h header that needs it.
2050
2051
-------------------------------------------------------------------
2052
Thu May  3 13:44:11 CEST 2007 - mmarek@suse.cz
2053
2054
- fixed some new compiler warnings
2055
2056
-------------------------------------------------------------------
2057
Thu May  3 08:25:46 UTC 2007 - judas_iscariote@shorewall.net
2058
2059
- upgrade to PHP 5.2.2, fixed hundreds of bugs including MOPB ones
2060
  if you need the complete changes see http://www.php.net/ChangeLog-5.php#5.2.2 
2061
2062
-------------------------------------------------------------------
2063
Thu May  3 04:47:57 UTC 2007 - judas_iscariote@shorewall.net
2064
2065
- Upgrade suhosin extension to version 0.9.19 see
2066
  http://www.hardened-php.net/suhosin/changelog.html for details
2067
2068
-------------------------------------------------------------------
2069
Fri Mar 30 11:34:29 CEST 2007 - mmarek@suse.de
2070
2071
- added bison to BuildRequires, removed update-desktop-files
2072
2073
-------------------------------------------------------------------
2074
Thu Mar 22 17:29:44 CET 2007 - mmarek@suse.de
2075
2076
- fixed unpack() on big-endian 64bit (revert-phpbug38770.patch)
2077
- blacklist more env variables when safe_mode is on
2078
  (php5-config.patch)
2079
2080
-------------------------------------------------------------------
2081
Sat Mar 17 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2082
2083
- fix Requires of -devel package to include only what is really
2084
  needed for operation of the pecl tool as well the neccesary
2085
  headers to compile php extensions.
2086
- Fix MOPB 24 "PHP array_user_key_compare() Double DTOR
2087
  Vulnerability"
2088
- note that fix for MOPB 23 was included in the previous patchset.
2089
2090
-------------------------------------------------------------------
2091
Wed Mar 14 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2092
2093
- add security fixes for MOPB 20, 21 and 22.
2094
- RPM_BUILD_ROOT is never defined in %post. 
2095
2096
-------------------------------------------------------------------
2097
Fri Mar 11 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2098
2099
- fix/workaround for php5-gd problem with typo3 [#236680]
2100
- add fix for MOPB-14-2007 PHP substr_compare() Information Leak
2101
  Vulnerability.
2102
- add secfix for import_request_variables() ancient problem, users
2103
  of suhosin extension are not affected.
2104
- Run the test suite here 
2105
2106
-------------------------------------------------------------------
2107
Tue Mar 06 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2108
2109
- Update suhosin extension to version 0.9.18 fixing a session
2110
  problem.
2111
2112
-------------------------------------------------------------------
2113
Mon Mar 05 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2114
2115
- Update suhosin extension to version 0.9.17. see 
2116
  http://www.hardened-php.net/suhosin/changelog.html for details.
2117
2118
-------------------------------------------------------------------
2119
Thu Feb 15 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2120
2121
- add t1lib support in php5-gd (10.3 and up only)
2122
- an off-by-one in str_replace may cause a crash.
2123
2124
-------------------------------------------------------------------
2125
Wed Feb 08 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2126
2127
- PHP 5.2.1. for a full list of changes see
2128
  http://www.php.net/ChangeLog-5.php#5.2.1
2129
- add Obsoletes for extensions we dont ship anymore
2130
2131
-------------------------------------------------------------------
2132
Fri Feb 02 14:00:00 CET 2007 - judas_iscariote@shorewall.net
2133
2134
- fix getenv() modifing $_POST, breaks suhosin badly when
2135
  register_* is On and variables orde is "GPCS" (default).
2136
- change/remove obsoleted patches
2137
2138
-------------------------------------------------------------------
2139
Tue Jan 30 11:08:09 CET 2007 - anosek@suse.cz
2140
2141
- synced with BuildService
2142
  * file "session_mm_apache2handler0.sem" written at boot
2143
    [#229200] (php5-config.patch)
2144
  * for certain functionality php5-exif requires php5-mbstring
2145
  * php5-ldap requires php5-openssl
2146
  * remove LDAP_DEPRECATED from CFLAGS, module already
2147
    takes care of this.
2148
  * patch potential HTTP_SESSION_VARS et all hijack when
2149
    register_globals is On users from suhosin extension are
2150
    not affected.(php5-session-rgon-hijack.patch) 
2151
  * on 10.2 and up  php5-devel should require pcre-devel
2152
    sqlite-devel sqlite2-devel
2153
  * php5-devel is mostly useless without autoconf automake libtool
2154
    bison make gcc.
2155
  * added patches: phpbug-39350.patch
2156
                   oldhat-phpinputdata-secfix.patch
2157
                   ze2-fixes.patch
2158
                   filter.patch
2159
                   ext-lib64again.patch
2160
2161
-------------------------------------------------------------------
2162
Fri Jan 26 11:10:44 CET 2007 - mmarek@suse.cz
2163
2164
- fixed string comparison in xmlrpc module (strcmp.patch)
2165
- allways apply %%patch9 
2166
2167
-------------------------------------------------------------------
2168
Fri Jan 26 11:01:28 CET 2007 - mmarek@suse.cz
2169
2170
- updated the curl module from cvs to fix build with curl-7.16
2171
  (curl-cvs-fix.patch, dropped gcc.patch)
2172
2173
-------------------------------------------------------------------
2174
Tue Dec 19 14:19:28 CET 2006 - anosek@suse.cz
2175
2176
- fixed VUL-0: php session.save_path open_basedir bypass
2177
  [#227569] (save_path-secfix.patch) 
2178
2179
-------------------------------------------------------------------
2180
Wed Dec  6 16:42:52 CET 2006 - anosek@suse.cz
2181
2182
- synced with BuildService
2183
  * updated Suhosin patch to 0.9.6.2
2184
  * updated Suhosin extension to 0.9.16
2185
  * fixed php5-devel should provide PECL tool [#204006]
2186
  * use bundled sqlite in  suse versions =< 10.1
2187
    (pdo_sqlite stopped working properly with older sqlite3 libs)
2188
  * do not use zend-multibyte anymore, please refer
2189
    to phpbug #36711 and associated links, no applications uses
2190
    this feature in the real world since it is disabled
2191
    in all other distributions/OS.seems to cause more problems
2192
    than solutions.
2193
  * change php.ini, back to short_open_tag =off (the default)
2194
    the package that depended on this setting no longer does.
2195
    Also explicitely set the upload_tmp_dir in php.ini to deal
2196
    with open_basedir recent changes (please refer
2197
    to phpbug #39123) for the details.
2198
  * suhosin.ini uses just the default recommended settings
2199
2200
-------------------------------------------------------------------
2201
Wed Nov  8 15:15:43 CET 2006 - anosek@suse.cz
2202
2203
- created symlinks /usr/bin/php and /usr/bin/pear [#216166]
2204
2205
-------------------------------------------------------------------
2206
Tue Nov  7 11:47:40 CET 2006 - mmarek@suse.cz
2207
2208
- fixed implicit function decls in suhosin patch (keep the original
2209
  patch intact and put fixes into separate patch)
2210
2211
-------------------------------------------------------------------
2212
Mon Nov  6 10:15:34 CET 2006 - mmarek@suse.cz
2213
2214
- updated to 5.2.0 final
2215
- merged changes from buildservice (by soporte@onfocus.cl):
2216
  - updated suhosin to 0.9.10
2217
  - added suhosin patch
2218
  - build with system PCRE if suse_release > 10.1 only [#215610]
2219
  - suhosin extension does not require PDO
2220
  - suhosin added to the reccommended list
2221
  - php5-pspell to require at least aspell-en otherwise is useless
2222
    [#217272]
2223
2224
-------------------------------------------------------------------
2225
Thu Oct 26 12:13:16 CEST 2006 - anosek@suse.cz
2226
2227
- php5-sqlite now uses our sqlite and sqlite2 packages to build
2228
  and not bundled ones [#201440]
2229
- updated suhosin to 0.9.9
2230
2231
-------------------------------------------------------------------
2232
Fri Oct 20 17:04:34 CEST 2006 - nadvornik@suse.cz
2233
2234
- update to 5.2.0RC6
2235
2236
-------------------------------------------------------------------
2237
Fri Oct 20 00:12:12 CEST 2006 - postadal@suse.cz
2238
2239
- reset right path in extension_dir (php5-php-config.patch)
2240
2241
-------------------------------------------------------------------
2242
Mon Oct  9 17:53:27 CEST 2006 - postadal@suse.cz
2243
2244
- update to version 5.2.0RC5
2245
- added suhosin extension (the hardened php replacement) [#210886]
2246
2247
-------------------------------------------------------------------
2248
Sun Oct  8 10:17:53 CEST 2006 - postadal@suse.cz
2249
2250
- update to version 5.2.0RC4
2251
  * added DSA key generation support to openssl_pkey_new()
2252
  * updated PCRE to version 6.7
2253
  * increased default memory limit to 16 megabytes to accommodate for a more
2254
    accurate memory utilization measurement
2255
  * added support for httpOnly flag for session extension and cookie setting
2256
    functions
2257
  * added version specific registry keys to allow different configurations for
2258
    different php version
2259
  * added "PHPINIDir" Apache directive to apache and apache_hooks SAPIs
2260
  * added an optional boolean parameter to memory_get_usage() and 
2261
    memory_get_peak_usage() to get memory size allocated by emalloc() or real
2262
    size of memory allocated from system
2263
  * moved extensions to PECL (filepro and hwapi)
2264
  * improved SNMP, OpenSSL extension
2265
  * improved the Zend memory manager, FastCGI SAPI, CURL, PCRE, PDO, SPL,
2266
    xmlReader
2267
2268
- merged changes from openSUSE build service
2269
  * build without --enable-sigchild [#206533, php#28294, php#38342]
2270
  * build CLI with libedit support (really-with-libedit.patch)
2271
  * tweaked the default config a bit, to make it more secure
2272
  * removed ini entries related to extensions we don't ship
2273
  * t1lib is not currently needed for build, we need t1lib5 to do 
2274
    something useful
2275
  * removeed --enable-ucd-snmp-hack (needed for ucd-snmp, but we use net-snmp)
2276
  * pdo_odbc provided by php-odbc
2277
  * php-suse-addons :
2278
    o PHP5 is unlikely to parse php3 code, remove the file association
2279
    o corrected apache directive is AddHandler not AddType
2280
  * dropped extensions:
2281
    o mysql, mysqli and pdo_mysql provided by php-mysql (reduce package count)
2282
    o php-pdo_sqlite provided by php-sqlite
2283
    o php-pdo_pgsql provided by php-pgsql 
2284
    o filepro dropped by upstream
2285
  * new extension:
2286
    o filter (kept static and cannot be unloaded, due security reasons)
2287
    o json (added as Recommended)
2288
    o zip (it uses a bundled library)
2289
2290
- fixed gcc issues (gcc.patch)
2291
- droped obsoleted patches: include_path.patch, bug-37720.patch, 
2292
  bug-37306.patch, cgi_bugs.patch, bug-37587.patch, gd-fixes.patch,
2293
  bug-37416.patch, main_bugs.patch, soap.patch, standard.patch, 
2294
  mbstring_bugs.patch, ze2_bugs.patch, xsl_bugs.patch, curl.patch
2295
  
2296
-------------------------------------------------------------------
2297
Wed Aug 16 14:01:02 CEST 2006 - postadal@suse.cz
2298
2299
- fixed build with X11R7
2300
2301
-------------------------------------------------------------------
2302
Wed Jul 26 16:36:05 CEST 2006 - postadal@suse.cz
2303
2304
- updated to version 5.1.4
2305
  * FastCGI interface was completely reimplemented
2306
  * multitude of improvements to the SPL, SimpleXML, GD, CURL and 
2307
    Reflection extensions
2308
  * support for many additional date formats added to the strtotime()
2309
  * a performance improvements added to the engine and core extensions
2310
  * added imap_savebody() that allows message body to be written to a file
2311
  * added lchown() and lchgrp() to change user/group ownership of symlinks
2312
  * upgraded bundled PCRE library to version 6.6
2313
2314
- merged changes from openSUSE build service
2315
  * removed unneeded sablot-devel,sqlite-devel,pcre-devel,fam-devel 
2316
    and libmcal from BuildRequires
2317
  * added php-ctype,php-dom,php-iconv,php-pdo,php-pdo_sqlite,php-sqlite,
2318
    php-tokenizer,php-xmlreader,php-xmlwriter to Recommends
2319
  * added php-mbstring php-gd php-pear php-gettext php-mysqli to Suggests
2320
  * added support for optional readline(libedit) for CLI 
2321
    (disabled by default)
2322
  * patches for zendengine (ze2_bugs.patch), xsl (xsl_bugs.patch), 
2323
    curl (curl.patch) and mbstring bugs (mbstring_bugs.patch),
2324
    big soap patch (soap.patch)
2325
  * removed obsoleted patches 
2326
  * fixed Safe Mode Bypass [#188243] (standard.patch)
2327
  * upstream patches  
2328
    [php#37306, php#37416, php#37587, php#37720]
2329
    [php#37576, php#37496, php#37341, php#37313, php#37256] (cgi_bugs.patch)
2330
    [php#37346, php#37360] (gd-fixes.patch)
2331
  * fixed build inconsistences, added php-hash module [#173023]
2332
  * added pdo_odbc.so to php-odbc module [#190614]
2333
  * build without explicit safe_mode and magic_quotes (unneeded)
2334
  * removed useless GD --with-ttf configure option, only suitable 
2335
    for freetype 1
2336
  
2337
-------------------------------------------------------------------
2338
Fri Jun  9 12:54:47 CEST 2006 - poeml@suse.de
2339
2340
- fix BuildRequires to build on SUSE Linux 10.1, 10.0, 9.3
2341
- use the -fstack-protector compile switch only on 10.0 and newer
2342
2343
-------------------------------------------------------------------
2344
Thu May 11 12:55:32 CEST 2006 - postadal@suse.cz
2345
2346
- fixed memory leak in imagecreatefromgif() 
2347
  [#173451] (phpbug-37346.patch)
2348
- fixed possibility of a wrong element being deleted by zend_hash_del() 
2349
  [#175976] (zend_hash_del.patch)
2350
- fixed substr_compare() when offset equals string length 
2351
  [#169038, php#37394] (CVE-2006-1991, phpbug-37394.patch)
2352
- fixed _emalloc() on 64bit archs [#169038] (emalloc.patch)
2353
2354
-------------------------------------------------------------------
2355
Wed May  3 15:16:05 CEST 2006 - postadal@suse.cz
2356
2357
- fixed completely broken SplTempFileObject [php#37257] 
2358
  (phpbug-37257.patch)
2359
- fixed problem with with $_POST array [php#37276]
2360
  (phpbug-37276.patch)
2361
2362
-------------------------------------------------------------------
2363
Wed Apr 12 15:24:24 CEST 2006 - postadal@suse.cz
2364
2365
- fixed security problem in copy() and tempname() 
2366
  [#164845] (CVE-2006-1494-1608.patch)
2367
- fixed phpinfo() XSS [#164804] (CVE-2006-0996.patch)
2368
- fixed memory leak in html_entity_decode  [#161718] (CVE-2006-1490.patch)
2369
- fixed multiple imap safemode and open_basedir restriction bypass
2370
  [#154317] (CVE-2006-1017.patch)
2371
2372
-------------------------------------------------------------------
2373
Mon Mar 27 17:39:43 CEST 2006 - postadal@suse.cz
2374
2375
- fixed buffer overrun in ftp_fopen_wrapper (ftp_fopen_wrapper.patch)
2376
2377
-------------------------------------------------------------------
2378
Tue Mar 14 11:44:04 CET 2006 - postadal@suse.cz
2379
2380
- added updating APACHE_MODULES in /etc/sysconfig/apache2 [#155333]
2381
- added forgotten regenerated sources for (parse_date.patch and
2382
  phpbug-36459.patch)
2383
- fixed upstream bugs:
2384
    [php#36420] (phpbug-36420)
2385
      - segfault when access result->num_rows after calling result->close()
2386
    (mysqli-64bit.patch)
2387
      - fixed a 64-bit problem
2388
2389
-------------------------------------------------------------------
2390
Fri Mar  3 14:13:14 CET 2006 - postadal@suse.cz
2391
2392
- fixed a possible null injection in mbstring (mbstring-null_injection.patch)
2393
- fixed upstream bugs:
2394
    [mysql#16144] (phpbug-16144)
2395
      - fix for MySQL 5.1 (mysql_stmt_attr_get)
2396
    [php#36656] (phpbug-36656)
2397
      - http_build_query generates invalid URIs due to use of square brackets
2398
    [php#36396,36510,36510,36638] (parse_date.patch)
2399
      - fixed few bugs in date/time parsing
2400
    (string.patch)
2401
      - added overflow checks to wordwrap() function
2402
    [php#36459] (phpbug-36459)
2403
      - incorrect adding PHPSESSID to links, which contains \r\n
2404
2405
-------------------------------------------------------------------
2406
Fri Mar  3 14:13:13 CET 2006 - postadal@suse.cz
2407
2408
- added php5-openssl to php5-ftp Requires [#154273]
2409
- added safe_mode num of parameter check for mb_send_mail [#154315]
2410
2411
-------------------------------------------------------------------
2412
Fri Feb 10 19:32:13 CET 2006 - postadal@suse.cz
2413
2414
- fixed upstream bugs:
2415
   [php#36306] (phpbug-36306.patch) 
2416
     - fixed crc32() for 64bit arch
2417
   [php#36351] (phpbug-36351.patch)
2418
     - parse_url() did not parse numeric paths properly
2419
   (spl_directory.patch)
2420
   [php#35998]
2421
     - getPathname() method always returns unix style filenames
2422
   [php#36134]
2423
     - DirectoryIterator constructor failed to detect empty directory names
2424
   [php#36258]
2425
     -  SplFileObject::getPath() may lead to segfault
2426
   [php#36287]
2427
   [php#36295]
2428
   [php#36359]
2429
     - splFileObject::fwrite() doesn't write when no data length specified
2430
   (session2.patch)
2431
     - fixed logic, if the client already sent us the cookie, we don't
2432
       need to send it again
2433
   (soap.patch) [php#36226, php#36083, php#36283]
2434
   (math.patch, simplexml.patch, mbstring.patch, zend_operators.patch, xp_socket.patch)
2435
     - initialize variables
2436
2437
-------------------------------------------------------------------
2438
Sat Feb  4 16:51:18 CET 2006 - postadal@suse.cz
2439
2440
- removed gd-devel from BuildRequires (better used bundled modified gd lib)
2441
- fixed upstream bugs:
2442
   [php#36268] (phpbug-36268.patch) 
2443
   [php#36148] (phpbug-36148.patch) 
2444
   [php#36185] (phpbug-36185.patch) 
2445
   [php#36208] (phpbug-36208.patch) 
2446
   [php#36158] (phpbug-36158.patch) 
2447
2448
-------------------------------------------------------------------
2449
Tue Jan 31 14:08:55 CET 2006 - postadal@suse.cz
2450
2451
- reverted default value for short_open_tag to On [#145895]
2452
2453
-------------------------------------------------------------------
2454
Mon Jan 30 18:05:13 CET 2006 - postadal@suse.cz
2455
2456
-  fixed upstream bugs:
2457
   [php#36176] (phpbug-36176.patch)
2458
   (pdo.patch) 
2459
    - properly rewrite queries where a bound parameter appears more then once
2460
    
2461
-------------------------------------------------------------------
2462
Mon Jan 30 13:59:35 CET 2006 - poeml@suse.de
2463
2464
- removed libapr-util1-devel from BuildRequires (apache2-devel does
2465
  require it)
2466
2467
-------------------------------------------------------------------
2468
Wed Jan 25 21:40:11 CET 2006 - mls@suse.de
2469
2470
- converted neededforbuild to BuildRequires
2471
2472
-------------------------------------------------------------------
2473
Tue Jan 24 16:03:31 CET 2006 - postadal@suse.cz
2474
2475
- added php5-pdo to requires for pdo_mysql, pdo_pgsql, pdo_sqlite and 
2476
  sqlite and php5-dom to requires for xmlreader and xsl [#144360]
2477
- revert name of extensions (appended suffix .so) [#143552]
2478
- removed _FILE_OFFSET_BITS=64 and _LARGEFILE_SOURCE from CFLAGS 
2479
  (doesn't work with apache2 configuration, which uses libapr with 
2480
  native support for large files) [#144362]
2481
- added -fstack-protector
2482
2483
-------------------------------------------------------------------
2484
Mon Jan 23 17:28:34 CET 2006 - postadal@suse.cz
2485
2486
- added forgoted extension xmlwrite
2487
- gave back simple dot to include_path [#129682]
2488
- fixed upstream bugs:
2489
  [php#36071] (phpbug-36011.patch)
2490
  [php#36016] (phpbug-36016.patch)
2491
    - realpath cache memleaks
2492
  [php#36071] (phpbug-36071.patch) 
2493
    - Zend engine crash related with 'clone' 
2494
  (zend-fix.patch) 
2495
    - fix issues with static method invocation 
2496
    - ce_child is properly initialized
2497
  [php#36046] (phpbug-36046.patch) 
2498
    - parse_ini_file() miscounts lines in multi-line values
2499
  [php#36037] (phpbug-36037.patch)
2500
    - heredoc adds extra line number
2501
  [php#36006] (phpbug-36006.patch)
2502
    - problem with $this in __destruct()
2503
  (gd.patch)
2504
    - improve open_basedir checks in GD
2505
  [php#36007] (phpbug-36007.patch)
2506
    - added new mysqli constants for BIT and NEW_DECIMAL field types (for mysql 5)
2507
  (session.patch)
2508
    - check for special characters in the session name
2509
  (xmlreader.patch)
2510
    - 64bit fixes
2511
2512
-------------------------------------------------------------------
2513
Thu Jan 19 17:41:37 CET 2006 - postadal@suse.cz
2514
2515
- disable discard-path for fastcgi binary [#143564]
2516
2517
-------------------------------------------------------------------
2518
Wed Jan 18 22:15:00 CET 2006 - postadal@suse.cz
2519
2520
- updated to version 5.1.2
2521
- removed obsoleted patches: CAN-2005-1042_1043.patch, CVE-2005-3353.patch,
2522
  openssl.patch, soap.patch, pdo.patch, simplexml.patch, curl.patch,
2523
  ze.patch
2524
- added pdo, pdo_mysql, pdo_pgsql, pdo_sqlite extensions
2525
2526
-------------------------------------------------------------------
2527
Tue Jan 17 19:30:45 CET 2006 - mrueckert@suse.de
2528
2529
- remove apache2-mod_fastcgi from nfb it seems to be unused
2530
2531
-------------------------------------------------------------------
2532
Sat Jan 14 18:50:37 CET 2006 - kukuk@suse.de
2533
2534
- Add gmp-devel to nfb
2535
2536
-------------------------------------------------------------------
2537
Tue Jan 10 01:59:39 CET 2006 - ro@suse.de
2538
2539
- avoid rpath /usr/ssl/lib in curl ext
2540
2541
-------------------------------------------------------------------
2542
Wed Jan  4 15:16:03 CET 2006 - postadal@suse.cz
2543
2544
- updated to version 5.1.1 [#135635, #139297]
2545
- removed obsoleted patches: php5-with_lib.patch, soap.patch, posix.patch,
2546
  gcc4.patch, save_path-segfault.patch, basedir-fix.patch, 
2547
  RPC-CAN-2005-1921.patch, RPC-CAN-2005-2498.patch, pcre-overflow-bug-106209.patch,
2548
  CVE-2005-3388.patch, CVE-2005-3389.patch, CVE-2005-3390.patch, 
2549
  mod_rewrite-fix.patch, mbstring.patch, CVE-2005-3391.patch, CVE-2005-3392.patch,
2550
  errordocument-fix.patch
2551
- removed sqlite2 from build dependencies and added libtidy libtidy-devel
2552
- removed dbx, fam, yp, dio extensions (upstream deprecated)
2553
- added dba, tidy and xmlreader extensions
2554
- renamed libphp5.so -> mod_php5.so (need it for yast module)
2555
- added upstream patches:
2556
  openssl.patch [php#35381]
2557
  soap.patch [php#35399]
2558
  pdo.patch [php#35431, php#35430]
2559
  simplexml.patch [php#35028]
2560
  curl.patch [php#35908]
2561
  ze.patch [php#35393]
2562
- updated pear sources install-pear-nozlib.phar
2563
- package CLI instad CGI binaries [#137443]
2564
- reverted last changes (problem caused curl-devel package)
2565
2566
-------------------------------------------------------------------
2567
Thu Dec 15 11:19:59 CET 2005 - mmarek@suse.cz
2568
2569
- provide php-pear in php5-pear
2570
- add /usr/share/php5/PEAR to include path
2571
2572
-------------------------------------------------------------------
2573
Tue Dec  6 23:54:12 CET 2005 - postadal@suse.cz
2574
2575
- fixed [php#33987] bug (php script as ErrorDocument causes crash
2576
  in Apache 2).
2577
2578
-------------------------------------------------------------------
2579
Mon Dec  5 14:54:25 CET 2005 - postadal@suse.cz
2580
2581
- fixed unexpected header can be injected to mb_send_mail()
2582
  [#135673] (mbstring.patch)
2583
- added safe_mode checks for image* functions and cURL
2584
  [#135673] (CVE-2005-3391.patch)
2585
- fixed possible INI setting leak via virtual() in Apache 2 sapi
2586
  [#135673] (CVE-2005-3392.patch)
2587
2588
-------------------------------------------------------------------
2589
Tue Nov 29 17:31:28 CET 2005 - mmarek@suse.cz
2590
2591
- build with flex-old until upstream fixes build with flex-2.5.31
2592
2593
-------------------------------------------------------------------
2594
Mon Nov 28 16:36:21 CET 2005 - postadal@suse.cz
2595
2596
- fixed CVE-2005-3388.patch [#131578]
2597
2598
-------------------------------------------------------------------
2599
Fri Nov 25 15:55:34 CET 2005 - postadal@suse.cz
2600
2601
- fixed segfaulting with mod_rewrite [#135480] (mod_rewrite-fix.patch)
2602
2603
-------------------------------------------------------------------
2604
Tue Nov 22 14:30:27 CET 2005 - uli@suse.de
2605
2606
- define ARM FP(A) endianness correctly
2607
2608
-------------------------------------------------------------------
2609
Tue Nov 15 15:44:00 CET 2005 - mmarek@suse.cz
2610
2611
- fixed infinite recursion in exif code
2612
  [#132684] (CVE-2005-3353.patch)
2613
- fixed XSS in phpinfo()
2614
  [#131578] (CVE-2005-3388.patch)
2615
- fixed register_globals actvation in parse_str()
2616
  [#131579] (CVE-2005-3389.patch)
2617
- fixed possible $GLOBALS overwrite
2618
  [#131580] (CVE-2005-3390.patch)
2619
- fixed handling basedirs that end with a / 
2620
  [#118976] (basedir-fix.patch)
2621
- fixed segfaulting when save_path is set and safe_mode is On
2622
  [#130227] (save_path-segfault.patch)
2623
2624
-------------------------------------------------------------------
2625
Tue Oct 25 14:32:09 CEST 2005 - rhafer@suse.de
2626
2627
- added LDAP_DEPRECATED to CFLAGS to build correctly with
2628
  OpenLDAP 2.3
2629
2630
-------------------------------------------------------------------
2631
Fri Oct 14 16:02:56 CEST 2005 - postadal@suse.cz
2632
2633
- fixed recode extension [#120087] (recode-fix.patch)
2634
- enabled _GNU_SOURCE for compiling
2635
2636
-------------------------------------------------------------------
2637
Wed Oct 12 14:00:59 CEST 2005 - postadal@suse.cz
2638
2639
- fixed implicit declaration (gcc4.patch)
2640
2641
-------------------------------------------------------------------
2642
Mon Oct 10 16:15:05 CEST 2005 - postadal@suse.cz
2643
2644
- fixed uninitialized variables (gcc4.patch)
2645
2646
-------------------------------------------------------------------
2647
Thu Sep  1 15:58:30 CEST 2005 - postadal@suse.cz
2648
2649
- added security patch pcre-overflow-bug-106209.patch for internal 
2650
  libpcre and statically linked against it [#114157]
2651
- added include_path = "/usr/share/php" to php.ini [#114406]
2652
2653
-------------------------------------------------------------------
2654
Thu Aug 25 14:15:14 CEST 2005 - postadal@suse.cz
2655
2656
- linked with system pcre libs (pcre-fix.patch) [#112645]
2657
2658
-------------------------------------------------------------------
2659
Thu Aug 18 17:28:55 CEST 2005 - postadal@suse.cz
2660
2661
- fixed XML RPC command injection 
2662
  (#94579, CAN-2005-192 and #104403, CAN-2005-2498)
2663
2664
-------------------------------------------------------------------
2665
Tue Aug  9 16:36:01 CEST 2005 - mls@suse.de
2666
2667
- removed compat from neededforbuild
2668
2669
-------------------------------------------------------------------
2670
Tue Aug  2 14:20:37 CEST 2005 - tcrhak@suse.cz
2671
2672
- dropped php4-dba and php4-readline due to license problems (bug #91489)
2673
- compile without -DPHP_AP_DEBUG (bug #95502)
2674
- fixed php-config to return a correct includes path (patch php5-php-config)
2675
- fixed a sigsegv in the soap extension (bug #99268, patch php5-soap)
2676
2677
-------------------------------------------------------------------
2678
Mon Apr 25 11:42:25 CEST 2005 - mcihar@suse.cz
2679
2680
- added pspell subpackages
2681
2682
-------------------------------------------------------------------
2683
Tue Apr 19 12:30:40 CEST 2005 - mcihar@suse.de
2684
2685
- update tarball to rereleased one which contains missing file
2686
2687
-------------------------------------------------------------------
2688
Sat Apr  9 10:54:19 CEST 2005 - aj@suse.de
2689
2690
- Compile with GCC4.
2691
2692
-------------------------------------------------------------------
2693
Mon Apr  4 14:09:45 CEST 2005 - mcihar@suse.cz
2694
2695
- update to 5.0.4
2696
- drop patches merged upstream
2697
- add RunTests.php missing from upstream tarball
2698
2699
-------------------------------------------------------------------
2700
Thu Mar 17 17:45:39 CET 2005 - mcihar@suse.cz
2701
2702
- fix path to configuration files
2703
2704
-------------------------------------------------------------------
2705
Mon Mar 14 16:14:42 CET 2005 - mcihar@suse.cz
2706
2707
- do not build CLI with all GCI stuff
2708
- fix build when extensions are built as *.so instead of just *
2709
- use different php.ini for each SAPI, this is needed for giving CLI more space to live (bug #72311)
2710
2711
-------------------------------------------------------------------
2712
Wed Mar  9 16:39:33 CET 2005 - mcihar@suse.cz
2713
2714
- provide compiled in modules
2715
2716
-------------------------------------------------------------------
2717
Mon Mar  7 13:20:02 CET 2005 - mcihar@suse.cz
2718
2719
- fix path to php5 binary in pear5 script (bug #71044)
2720
2721
-------------------------------------------------------------------
2722
Thu Mar  3 18:01:29 CET 2005 - mcihar@suse.de
2723
2724
- realy enable xml module
2725
2726
-------------------------------------------------------------------
2727
Tue Mar  1 11:38:31 CET 2005 - mcihar@suse.cz
2728
2729
- provide only mod_php_any in apache module (bug #66729)
2730
2731
-------------------------------------------------------------------
2732
Mon Feb 21 15:02:04 CET 2005 - mcihar@suse.cz
2733
2734
- fix some compile time warnings
2735
2736
-------------------------------------------------------------------
2737
Thu Feb 10 15:24:02 CET 2005 - mcihar@suse.cz
2738
2739
- add zlib dependency to pear (bug #50697)
2740
2741
-------------------------------------------------------------------
2742
Wed Feb  9 15:52:45 CET 2005 - mcihar@suse.cz
2743
2744
- use correct path to apache2_MMN
2745
- comment some patches
2746
- update README.SUSE
2747
- drop unused sce_install
2748
- each extension now provides also unversioned symbol, to allow not to depend
2749
  on specific php version
2750
- drop MIME type change as both php modules don't work together anyway
2751
2752
-------------------------------------------------------------------
2753
Tue Feb  8 15:16:51 CET 2005 - mcihar@suse.cz
2754
2755
- drop actually unused patches
2756
- fix build on ia64 (endians patch, stolen from cvs) (still doesn't build due to missing current MySQL)
2757
- fix build on lib64 machines
2758
2759
-------------------------------------------------------------------
2760
Mon Feb  7 17:48:22 CET 2005 - mcihar@suse.cz
2761
2762
- initial packaging of php5
2763
- suse addons are now in tarball instead of patch
2764
- reorganize patches
2765
- simplified build system
2766
2767
-------------------------------------------------------------------
2768
Wed Jan 26 17:24:48 CET 2005 - mcihar@suse.cz
2769
2770
- update asp2php
2771
- drop lynx from buildrequires
2772
2773
-------------------------------------------------------------------
2774
Tue Jan 11 17:48:38 CET 2005 - mcihar@suse.cz
2775
2776
- fix broken int unserializing on 64-bit (bug #49617)
2777
2778
-------------------------------------------------------------------
2779
Fri Dec 17 17:53:37 CET 2004 - poeml@suse.de
2780
2781
- update to 4.3.10
2782
- for apache module, pick up CFLAGS from apxs [#49356]
2783
- drop obsolete php-4.3.9RC3.diff
2784
- update lib64.diff
2785
- fix return type in php_sprintf()
2786
- don't apply php-4.3.8-snmp.diff
2787
- do not clean buildroot in buildsystem to facilitate debugging
2788
- fix PreRequires (sce_install_path) [#46664]
2789
2790
-------------------------------------------------------------------
2791
Thu Nov 18 15:40:36 CET 2004 - ro@suse.de
2792
2793
- use kerberos-devel-packages 
2794
2795
-------------------------------------------------------------------
2796
Thu Nov  4 16:07:12 CET 2004 - ro@suse.de
2797
2798
- added rpm-devel,popt-devel,tcpd,tcpd-devel to neededforbuild (for snmp)
2799
2800
-------------------------------------------------------------------
2801
Tue Oct 05 13:09:59 CEST 2004 - pmladek@suse.cz
2802
2803
- added /usr/lib/php/sce_install to prerequires of php4-swf; it is in the
2804
  package php4-32bit on x86_64 [#46475]
2805
2806
-------------------------------------------------------------------
2807
Thu Sep 23 20:21:17 CEST 2004 - tcrhak@suse.cz
2808
2809
- security fix for array parsing (bug #45710) and
2810
  some other fixes from php-4.3.9RC3 (patch 4.3.9RC3)
2811
- removed the #%endif causing syntax error during /usr/lib/php/sce_install (bug #45589)
2812
- /var/lib/php is now owned by wwwrun (bug #45360)
2813
- reverted dlopen flag back to RTLD_GLOBAL (bugs #39197 and #41866),
2814
  php4-recode now conflicts with php4-imap, php4-mysql and apache2-mod_auth_mysql,
2815
  mod_php4-core does not require php4-recode any more
2816
- dropped php4-dba and php4-readline due to license poblems (bug #45654)
2817
2818
-------------------------------------------------------------------
2819
Fri Sep 17 16:02:17 CEST 2004 - tcrhak@suse.cz
2820
2821
- added tomcat5 to the Requires of php4-servlet
2822
2823
-------------------------------------------------------------------
2824
Wed Sep 15 13:47:36 CEST 2004 - tcrhak@suse.cz
2825
2826
- removed the build dependency on tomcat5
2827
- added tomcat5 directories to filelist
2828
- enabled iconv for the other archs
2829
2830
-------------------------------------------------------------------
2831
Tue Sep 14 16:50:54 CEST 2004 - skh@suse.de
2832
2833
- use new JPackage packages tomcat5 and servletapi5 to build
2834
2835
-------------------------------------------------------------------
2836
Fri Sep 10 15:58:26 CEST 2004 - tcrhak@suse.cz
2837
2838
- do not source setJava
2839
2840
-------------------------------------------------------------------
2841
Fri Sep 03 15:16:42 CEST 2004 - tcrhak@suse.cz
2842
2843
- update to 4.3.8
2844
- added module dbx (bug #43972)
2845
- use system gd library, includes "GIF Create Support" (bug #44001)
2846
- disallow persistant connections by default (bug #34849)
2847
- use /var/lib/php for php sessions by default (bug #36886)
2848
- php modules need to prereq sce_install (bug #43994)
2849
2850
-------------------------------------------------------------------
2851
Thu Aug 19 16:52:42 CEST 2004 - aj@suse.de
2852
2853
- Remove broken cat commands from post section:
2854
  * no requires for them
2855
  * no need to execute them
2856
2857
-------------------------------------------------------------------
2858
Mon Aug 16 14:18:01 CEST 2004 - ro@suse.de
2859
2860
- fix build with updated libcurl: use current instead of
2861
  deprecated type for curl_httppost
2862
2863
-------------------------------------------------------------------
2864
Tue Jun  8 15:39:32 CEST 2004 - ro@suse.de
2865
2866
- removed mod_dav from neededforbuild
2867
- removed mod_php4 package (mod_php4-core is probably obsolete too)
2868
2869
-------------------------------------------------------------------
2870
Tue May 04 13:10:24 CEST 2004 - tcrhak@suse.cz
2871
2872
- build with postfix instead of sendmail
2873
2874
-------------------------------------------------------------------
2875
Thu Apr 29 23:58:25 CEST 2004 - ro@suse.de
2876
2877
- remove apache1 related parts
2878
2879
-------------------------------------------------------------------
2880
Fri Apr 23 13:54:49 CEST 2004 - tcrhak@suse.cz
2881
2882
- added sendmail to neededforbuild, so that mail() is defined (bug #39153)
2883
- dlopen php modules with RTLD_LOCAL (fixes bug #39197)
2884
2885
-------------------------------------------------------------------
2886
Wed Mar 31 09:13:21 CEST 2004 - tcrhak@suse.cz
2887
2888
- added php module recode (bug #36573)
2889
- fixed requires of mod_php4-apache2 (bug #37041)
2890
2891
-------------------------------------------------------------------
2892
Mon Mar 22 22:40:01 CET 2004 - ro@suse.de
2893
2894
- build-fix for jakarta-tomcat from skh
2895
- removed apache-contrib from neededforbuild (dropped)
2896
2897
-------------------------------------------------------------------
2898
Tue Mar 16 12:03:36 CET 2004 - tcrhak@suse.cz
2899
2900
- removed --enable-versioning (fixes bug #35716)
2901
- do not build servlet for ia64, ppc and ppc64
2902
2903
-------------------------------------------------------------------
2904
Fri Mar 05 16:20:39 CET 2004 - tcrhak@suse.cz
2905
2906
- modularized
2907
- updated to version 4.3.4
2908
- added fastcgi
2909
- added PHP4 module sockets
2910
- added PHP4 module mime_magic (bug #34134)
2911
- php binary is now CLI, not CGI (bug #34152)
2912
2913
-------------------------------------------------------------------
2914
Wed Feb 18 14:57:33 CET 2004 - ro@suse.de
2915
2916
- use jakarta-tomcat4
2917
2918
-------------------------------------------------------------------
2919
Mon Feb 16 01:02:49 CET 2004 - ro@suse.de
2920
2921
- use unixODBC instead of iodbc
2922
2923
-------------------------------------------------------------------
2924
Tue Feb 10 23:51:35 CET 2004 - poeml@suse.de
2925
2926
- fix symbol exports for apache2
2927
- add -fno-strict-aliasing to CFLAGS, due to code where
2928
  dereferencing type-punned pointers would break strict aliasing
2929
- fix test load of apache2 module (the LoadModule statement went
2930
  into the wrong place)
2931
2932
-------------------------------------------------------------------
2933
Sun Feb  8 20:43:46 CET 2004 - schwab@suse.de
2934
2935
- Fix symbol exports.
2936
- Also look for BEAJava2 directory.
2937
- Fix quoting.
2938
2939
-------------------------------------------------------------------
2940
Thu Jan 22 01:33:57 CET 2004 - ro@suse.de
2941
2942
- fix build with current automake
2943
2944
-------------------------------------------------------------------
2945
Fri Jan 16 12:57:14 CET 2004 - kukuk@suse.de
2946
2947
- Add pam-devel to neededforbuild
2948
2949
-------------------------------------------------------------------
2950
Tue Jan 13 16:28:22 CET 2004 - ro@suse.de
2951
2952
- remove subpackage aolserver
2953
- fix build with current freetype
2954
2955
-------------------------------------------------------------------
2956
Mon Nov 10 15:55:51 CET 2003 - ro@suse.de
2957
2958
- use net-snmp instead of ucdsnmp 
2959
2960
-------------------------------------------------------------------
2961
Thu Oct 30 09:04:02 CET 2003 - tcrhak@suse.cz
2962
2963
- ad previous fix: create the directory
2964
2965
-------------------------------------------------------------------
2966
Wed Oct 29 17:12:34 CET 2003 - tcrhak@suse.cz
2967
2968
- added %{_libdir}/php/bin to file list of mod_php4-core
2969
2970
-------------------------------------------------------------------
2971
Mon Sep 22 18:11:58 CEST 2003 - mls@suse.de
2972
2973
- remove 'Obsoletes: mod_php' from mod_php4, otherwise rpmv4
2974
  makes mod_php4 conflict with apache2-mod_php4
2975
2976
-------------------------------------------------------------------
2977
Tue Sep 16 15:22:13 CEST 2003 - tcrhak@suse.cz
2978
2979
- update to version 4.3.3
2980
2981
-------------------------------------------------------------------
2982
Mon Sep 01 19:52:02 CEST 2003 - tcrhak@suse.cz
2983
2984
- expand rpm macros in /etc/httpd/modules/mod_php4 [bug #29664]
2985
2986
-------------------------------------------------------------------
2987
Thu Aug 21 19:48:24 CEST 2003 - tcrhak@suse.cz
2988
2989
- update to version 4.3.2
2990
- use BuildRoot
2991
- added activation metadata to sysconfig [bug #28827]
2992
2993
-------------------------------------------------------------------
2994
Mon Aug 18 14:16:11 CEST 2003 - poeml@suse.de
2995
2996
- add README.{SuSE,UnitedLinux} [#25888]
2997
- don't explicitely strip binary objects, because RPM does it
2998
  anyway, and it might keep the stripped debugging info somewhere.
2999
- don't try to install a file in /etc/apache2/modules/ (it's gone)
3000
3001
-------------------------------------------------------------------
3002
Mon Jun 30 12:14:50 CEST 2003 - ro@suse.de
3003
3004
- always use libtool to compile objects
3005
- added directories to filelist 
3006
3007
-------------------------------------------------------------------
3008
Thu Apr 10 12:58:19 CEST 2003 - tcrhak@suse.cz
3009
3010
- use 'head -n 1' instead of 'head -1'
3011
- added mhash support
3012
3013
-------------------------------------------------------------------
3014
Wed Mar 26 19:28:31 CET 2003 - tcrhak@suse.cz
3015
3016
- fixed path in script phpize
3017
- fixed ext/mysql/config.m4
3018
3019
-------------------------------------------------------------------
3020
Thu Mar 13 16:46:58 CET 2003 - tcrhak@suse.cz
3021
3022
- fixed order of Type and Define in sysconfig metadata
3023
- readded subpackage servlet (patch servlet)
3024
- reenabled support for swf
3025
- install swf fonts, use proper SWFFONTPATH
3026
  (bug #18057, patch swf)
3027
3028
-------------------------------------------------------------------
3029
Tue Mar  4 16:42:57 CET 2003 - poeml@suse.de
3030
3031
- the apache2 module requires the apache2-prefork MPM
3032
3033
-------------------------------------------------------------------
3034
Thu Feb 20 14:39:51 CET 2003 - tcrhak@suse.cz
3035
3036
- security update to version 4.3.1 - fixes a CGI vulnerability
3037
- added sysconfig metadata [bug #22604]
3038
3039
-------------------------------------------------------------------
3040
Fri Feb 14 13:46:32 CET 2003 - tcrhak@suse.cz
3041
3042
- added php3, php4 to DirectoryIndex [bug #22066]
3043
3044
-------------------------------------------------------------------
3045
Thu Feb 13 23:40:55 CET 2003 - ro@suse.de
3046
3047
- really disable (empty) subpackage servlet 
3048
3049
-------------------------------------------------------------------
3050
Wed Feb 12 15:03:09 CET 2003 - poeml@suse.de
3051
3052
- rename subpackage mod_php4_2 to apache2-mod_php4
3053
3054
-------------------------------------------------------------------
3055
Tue Feb 11 14:23:10 CET 2003 - poeml@suse.de
3056
3057
- call the new /usr/share/apache2/get_module_list script to
3058
  configure apache2, so the test can be passed
3059
3060
-------------------------------------------------------------------
3061
Wed Jan 15 16:28:35 CET 2003 - ro@suse.de
3062
3063
- use sasl2 
3064
3065
-------------------------------------------------------------------
3066
Fri Jan 10 15:50:43 CET 2003 - poeml@suse.de
3067
3068
- don't built -servlet for now, needs work
3069
- swf.h has vanished from ./dist/include/, and I can't find another
3070
  one --> disabling swf support
3071
3072
-------------------------------------------------------------------
3073
Thu Jan  9 01:52:13 CET 2003 - poeml@suse.de
3074
3075
- update to 4.3.0
3076
  - GD library is now bundled with the distribution and it is
3077
    recommended to always use the bundled version
3078
  - vpopmail and cybermut extensions are moved to PECL
3079
  - several deprecated extensions (aspell, ccvs, cybercash, icap)
3080
    and SAPIs (fastcgi, fhttpd) are removed
3081
  - speed improvements in a variety of string functions
3082
  - Apache2 filter is improved, but is still considered
3083
    experimental (use with PHP in prefork and not worker (thread)
3084
    model since many extensions based on external libraries are not
3085
    thread safe)
3086
  - various security fixes (imap, mysql, mcrypt, file upload, gd, etc)
3087
  - new SAPI for embedding PHP in other applications (experimental)
3088
  - much better test suite
3089
  - significant improvements in dba, gd, pcntl, sybase, and xslt
3090
    extensions
3091
  - debug_backtrace() should help with debugging
3092
  - error messages now contain URLs linking to pages describing the
3093
    error or function in question
3094
  - Zend Engine has some fixes and minor performance enhancements
3095
  - and TONS of other fixes, updates, new functions, etc
3096
- build apache2 module
3097
- QtDOM support is now in qt3, and therefore we need to link
3098
  against libqt-mt
3099
- merge the lib64 patch, hope it's complete
3100
- gd lib is now bundled, and preferred for building
3101
- adjust the Provides of the -core package
3102
3103
-------------------------------------------------------------------
3104
Thu Nov 21 18:35:27 CET 2002 - ro@suse.de
3105
3106
- make it build with current automake 
3107
3108
-------------------------------------------------------------------
3109
Wed Oct 16 18:54:17 CEST 2002 - tcrhak@suse.cz
3110
3111
- added support for readline
3112
- added support for iconv and mbstrings [bugs #19861 and #19862]
3113
3114
-------------------------------------------------------------------
3115
Fri Sep 27 20:04:33 CEST 2002 - tcrhak@suse.cz
3116
3117
- added type .php3 to apache mod_php4.conf
3118
3119
-------------------------------------------------------------------
3120
Wed Sep 18 01:50:00 CEST 2002 - ro@suse.de
3121
3122
- removed bogus self-provides 
3123
3124
-------------------------------------------------------------------
3125
Tue Sep 03 22:47:14 CEST 2002 - tcrhak@suse.cz
3126
3127
- fixed to build on 64 bit archs
3128
3129
-------------------------------------------------------------------
3130
Fri Aug 23 17:25:57 CEST 2002 - tcrhak@suse.cz
3131
3132
- fixed to build on non-i386 archs
3133
- added dynamic extensions to the file list of subpackage core
3134
3135
-------------------------------------------------------------------
3136
Tue Aug 20 11:07:14 CEST 2002 - tcrhak@suse.cz
3137
3138
- added PreReq
3139
3140
-------------------------------------------------------------------
3141
Tue Aug 13 21:44:12 CEST 2002 - kukuk@suse.de
3142
3143
- Remove unused qt2 from neededforbuild
3144
3145
-------------------------------------------------------------------
3146
Wed Aug  7 17:26:24 CEST 2002 - uli@suse.de
3147
3148
- fixed to build on lib64 archs (still broken on nearly all archs
3149
  due to other problems)
3150
3151
-------------------------------------------------------------------
3152
Mon Aug  5 11:54:12 CEST 2002 - ro@suse.de
3153
3154
- use "-follow" when searching for jni.h 
3155
3156
-------------------------------------------------------------------
3157
Sun Jul 28 08:49:53 CEST 2002 - kukuk@suse.de
3158
3159
- remove unused gdb from neededforbuild
3160
3161
-------------------------------------------------------------------
3162
Sat Jul 27 13:52:07 CEST 2002 - adrian@suse.de
3163
3164
- fix neededforbuild
3165
3166
-------------------------------------------------------------------
3167
Fri Jul 26 11:42:15 CEST 2002 - kukuk@suse.de
3168
3169
- Add imap-lib to neededforbuild
3170
3171
-------------------------------------------------------------------
3172
Tue Jul 23 15:53:20 CEST 2002 - tcrhak@suse.cz
3173
3174
- update to version 4.2.2
3175
- update of asp2php to version 0.76.12
3176
- detect the module magic number if provided by apache, indicating 
3177
  API changes, and add an RPM Require on it
3178
- add compiled extensions (currently gd.so, as it is build shared
3179
  by a previous change by bk@suse.de) to php.ini and filelist
3180
3181
-------------------------------------------------------------------
3182
Fri Jul  5 10:43:32 CEST 2002 - kukuk@suse.de
3183
3184
- Use %ix86 macro
3185
3186
-------------------------------------------------------------------
3187
Tue May 28 02:09:57 CEST 2002 - ro@suse.de
3188
3189
- replaced /opt/jakarta with /opt/jakarta/tomcat 
3190
3191
-------------------------------------------------------------------
3192
Mon May 27 18:19:38 CEST 2002 - ro@suse.de
3193
3194
- first try for lib64 
3195
3196
-------------------------------------------------------------------
3197
Mon May 27 16:25:28 CEST 2002 - bk@suse.de
3198
3199
- use shared libgd on all archs
3200
3201
-------------------------------------------------------------------
3202
Sat Mar 23 09:59:10 CET 2002 - ro@suse.de
3203
3204
- removed unixODBC stuff, was never used (iodbc is used) 
3205
3206
-------------------------------------------------------------------
3207
Fri Mar 15 11:51:11 CET 2002 - tcrhak@suse.cz
3208
3209
- added %{_datadir}/lib/php and extension dir to devel filelist
3210
3211
-------------------------------------------------------------------
3212
Mon Mar  4 12:28:32 CET 2002 - okir@suse.de
3213
3214
- security fix
3215
3216
-------------------------------------------------------------------
3217
Fri Feb 22 14:27:51 CET 2002 - tcrhak@suse.cz
3218
3219
- Killed %{release} from "Requires" tags.
3220
-------------------------------------------------------------------
3221
Fri Feb  1 00:26:05 CET 2002 - ro@suse.de
3222
3223
- changed neededforbuild <libpng> to <libpng-devel-packages>
3224
3225
-------------------------------------------------------------------
3226
Mon Jan 28 12:40:33 CET 2002 - ro@suse.de
3227
3228
- added des to neededforbuild 
3229
3230
-------------------------------------------------------------------
3231
Mon Jan 28 01:35:33 CET 2002 - ro@suse.de
3232
3233
- added heimdal stuff to build 
3234
3235
-------------------------------------------------------------------
3236
Wed Jan 23 01:59:36 CET 2002 - ro@suse.de
3237
3238
- try to build with db-devel in neededforbuild 
3239
3240
-------------------------------------------------------------------
3241
Thu Jan 17 01:07:13 CET 2002 - ro@suse.de
3242
3243
- adapted for /etc/sysconfig/apache 
3244
3245
-------------------------------------------------------------------
3246
Thu Dec 20 14:16:12 CET 2001 - tcrhak@suse.cz
3247
3248
- update to 4.1.0
3249
- no mm support for aol and servlet (mm is not ZTS in 4.1 yet)
3250
- patched acinclude.m4 to find the very dir for mysql libraries
3251
- added `php-config --extension-dir` to core files
3252
3253
-------------------------------------------------------------------
3254
Thu Dec 10 17:56:38 CEST 2001 - tcrhak@suse.cz
3255
3256
- fixed extension section
3257
3258
-------------------------------------------------------------------
3259
Thu Dec  6 17:05:27 CEST 2001 - tcrhak@suse.cz
3260
3261
- added section [extension section] to php.ini
3262
- fixed options given to configure
3263
3264
-------------------------------------------------------------------
3265
Tue Dec  4 16:34:25 CEST 2001 - tcrhak@suse.cz
3266
3267
- fixed configure.in and config.m4's for autoconf 2.52
3268
- added libtoolize, autoconf, autoheader
3269
- used setJava to find JAVA_HOME
3270
- TTF - bug 9523
3271
- gd  - bug 12226
3272
- changed the order in which subpackages (for Servers) are built,
3273
- so that the devel package corresponds to core 
3274
- (=> experimental-zts disabled)
3275
- moved phpize to the devel package (fixed for autoconf 2.52)
3276
- added files needed by phpize to the devel package
3277
3278
-------------------------------------------------------------------
3279
Mon Dec  3 14:57:15 CET 2001 - ro@suse.de
3280
3281
- changed servlet dir for configure with jakarta 
3282
3283
-------------------------------------------------------------------
3284
Mon Dec  3 09:31:42 CET 2001 - ro@suse.de
3285
3286
- fixed neededforbuild <jakarta> to <jakarta-tomcat> 
3287
3288
-------------------------------------------------------------------
3289
Tue Nov 20 16:47:27 CET 2001 - rolf@suse.de
3290
3291
- changes to make IA64 work
3292
- exclude subpackages AOL and Servlet from AXP
3293
3294
-------------------------------------------------------------------
3295
Mon Nov 19 00:51:02 CET 2001 - ro@suse.de
3296
3297
- fix to find java 
3298
3299
-------------------------------------------------------------------
3300
Wed Nov 14 17:41:40 CET 2001 - rolf@suse.de
3301
3302
- new subpackage -devel with include files
3303
3304
-------------------------------------------------------------------
3305
Mon Nov 12 17:22:02 CET 2001 - ro@suse.de
3306
3307
- hack for libxml2 include location 
3308
3309
-------------------------------------------------------------------
3310
Fri Oct 26 01:36:56 CEST 2001 - ro@suse.de
3311
3312
- use qt2 for qtdom (but aparently that is not built anyway) 
3313
3314
-------------------------------------------------------------------
3315
Thu Oct 25 01:06:13 CEST 2001 - ro@suse.de
3316
3317
- try neededforbuild alias apache-devel-packages 
3318
3319
-------------------------------------------------------------------
3320
Tue Sep 11 00:01:57 CEST 2001 - ro@suse.de
3321
3322
- remove roxen subpackage
3323
  roxen is not in the distribution currently 
3324
3325
-------------------------------------------------------------------
3326
Wed Aug 22 13:11:37 CEST 2001 - ro@suse.de
3327
3328
- removed pdflib from neededforbuild (license problems) 
3329
3330
-------------------------------------------------------------------
3331
Tue Aug 14 09:26:15 CEST 2001 - ro@suse.de
3332
3333
- pear: changed header to look for php in "bindir" not "prefix/bin"
3334
  to fix requires 
3335
3336
-------------------------------------------------------------------
3337
Mon Aug 13 16:34:01 CEST 2001 - kukuk@suse.de
3338
3339
- Don't conflict with packages we are providing
3340
3341
-------------------------------------------------------------------
3342
Thu Aug  9 15:34:21 CEST 2001 - kukuk@suse.de
3343
3344
- Fix search for installed java directory
3345
3346
-------------------------------------------------------------------
3347
Tue Jul 24 12:13:56 CEST 2001 - rolf@suse.de
3348
3349
- new subpackage mod_php4-aolserver for use of PHP4 with AOL server
3350
- disable-debug so Zend optimizer can work
3351
3352
-------------------------------------------------------------------
3353
Thu Jul  5 14:24:21 CEST 2001 - rolf@suse.de
3354
3355
- update to php 4.0.6
3356
- apply memlimit patch
3357
- new subpackage mod_php4-servlet for use of PHP4 as JAVA servlet
3358
  with tomcat
3359
- new options: --with-gmp, --with-dom, mbstring
3360
3361
-------------------------------------------------------------------
3362
Mon Jun 25 15:44:59 CEST 2001 - rolf@suse.de
3363
3364
- fixed bug with pdflib which also fixes [BUG#8246]
3365
3366
-------------------------------------------------------------------
3367
Tue Jun 19 12:21:12 CEST 2001 - rolf@suse.de
3368
3369
- new version 4.0.5
3370
- disable pgsql for roxen, as it is broken
3371
- mysql bug fixed in this release [BUG#6839]
3372
- move stuff to /usr/share/php [BUG#8352]
3373
- now Provides: mod_php as well [BUG#8911]
3374
3375
-------------------------------------------------------------------
3376
Sat May 12 18:29:28 CEST 2001 - schwab@suse.de
3377
3378
- Use new readline interface.
3379
3380
-------------------------------------------------------------------
3381
Tue May  8 17:11:44 CEST 2001 - mfabian@suse.de
3382
3383
- bzip2 sources
3384
3385
-------------------------------------------------------------------
3386
Tue May  1 17:29:20 CEST 2001 - kukuk@suse.de
3387
3388
- disable adabas support
3389
3390
-------------------------------------------------------------------
3391
Thu Apr 26 02:26:23 CEST 2001 - ro@suse.de
3392
3393
- neededforbuild: curl_ssl-devel -> curl-devel
3394
3395
-------------------------------------------------------------------
3396
Sun Apr  8 21:09:52 CEST 2001 - poeml@suse.de
3397
3398
- fix Requires (rearrange tags to define them before using them)
3399
- fix spec file typo
3400
3401
-------------------------------------------------------------------
3402
Tue Mar 27 12:04:43 MEST 2001 - rolf@suse.de
3403
3404
- spin off subpackage mod_php4-core which is required by apache and
3405
  roxen modules now
3406
- moved config file to /etc/php.ini for all php4 modules
3407
- sybase support conflicts with Adabas D support
3408
- Ingres support is for Ingres II only
3409
- added t1lib support [BUG#6212]
3410
- updated asp2php 0.75.13
3411
- make us of suse_loadmodule for testing
3412
- added /usr/bin/php to core package [BUG#6648]
3413
3414
-------------------------------------------------------------------
3415
Wed Mar 21 23:27:14 CET 2001 - ro@suse.de
3416
3417
- changed neededforbuild to freetype2 
3418
3419
-------------------------------------------------------------------
3420
Thu Mar 15 14:16:49 CET 2001 - ro@suse.de
3421
3422
- build with openldap2 
3423
3424
-------------------------------------------------------------------
3425
Thu Mar 15 01:08:35 CET 2001 - ro@suse.de
3426
3427
- fixed neededforbuild for openldap
3428
3429
-------------------------------------------------------------------
3430
Mon Mar  5 23:58:57 CET 2001 - ro@suse.de
3431
3432
- use -fPIC 
3433
3434
-------------------------------------------------------------------
3435
Fri Feb 23 16:24:24 CET 2001 - ro@suse.de
3436
3437
- changed neededforbuild <apache> to <apache apache-devel>
3438
3439
-------------------------------------------------------------------
3440
Fri Feb 23 00:10:25 CET 2001 - ro@suse.de
3441
3442
- added readline/readline-devel to neededforbuild (split from bash)
3443
3444
-------------------------------------------------------------------
3445
Thu Feb 15 18:06:52 MET 2001 - rolf@suse.de
3446
3447
- new features imap-ssl, bz2, qtdom, ctype, debug, force-cgi-redirect,
3448
discard_path, sigchild, gd-imgstrttf
3449
- added apache-mod_php4.rc.config
3450
- added /etc/httpd/modules/mod_php4
3451
3452
-------------------------------------------------------------------
3453
Wed Jan 17 19:28:46 MET 2001 - rolf@suse.de
3454
3455
- add libpdf support
3456
3457
-------------------------------------------------------------------
3458
Tue Jan 16 13:06:31 MET 2001 - rolf@suse.de
3459
3460
- update to 4.0.4pl1 due to security issue [BUG#5760]
3461
- remove number4.tar.gz, no longer needed
3462
3463
-------------------------------------------------------------------
3464
Fri Jan 12 11:36:19 MET 2001 - rolf@suse.de
3465
3466
- need expat to compile [BUG#5104]
3467
- subpackage for roxen module
3468
3469
-------------------------------------------------------------------
3470
Fri Jan 12 09:39:57 CET 2001 - cihlar@suse.cz
3471
3472
- fixed to compile with roxe/pike [#4408]
3473
3474
-------------------------------------------------------------------
3475
Tue Dec 19 16:32:27 MET 2000 - rolf@suse.de
3476
3477
- link with libssl
3478
3479
-------------------------------------------------------------------
3480
Tue Dec 19 15:07:57 MET 2000 - rolf@suse.de
3481
3482
- added the asp2php package [BUG#4456]
3483
- roxen/pike still doesn´t work
3484
- require RPM group tag via apxs
3485
3486
-------------------------------------------------------------------
3487
Wed Nov 29 18:53:35 CET 2000 - ro@suse.de
3488
3489
- changed neededforbuild <pg_lib> to <postgresql-lib>
3490
3491
-------------------------------------------------------------------
3492
Mon Nov 27 17:41:02 MET 2000 - rolf@suse.de
3493
3494
- added Sablotron support     [BUG#3891]
3495
- added curl support          [BUG#3890]
3496
- added Flash support on i386 [BUG#3209]
3497
- also pack module files in /usr/lib/php/
3498
- moved the exec dir to /usr/lib/php/bin
3499
- include pear binaries
3500
- added the following modules: sockets, shmop, exif, filepro, dbase
3501
  readline, mcrypt, gettext
3502
3503
-------------------------------------------------------------------
3504
Wed Nov 15 18:29:49 CET 2000 - ro@suse.de
3505
3506
- fixed neededforbuild gdlib -> gd gd-devel
3507
3508
-------------------------------------------------------------------
3509
Thu Nov  9 00:27:01 CET 2000 - ro@suse.de
3510
3511
- prefer ndbm.h to db1/ndbm.h 
3512
3513
-------------------------------------------------------------------
3514
Mon Nov  6 10:11:58 CET 2000 - ro@suse.de
3515
3516
- added imap-devel to neededforbuild 
3517
3518
-------------------------------------------------------------------
3519
Mon Nov  6 01:17:41 CET 2000 - ro@suse.de
3520
3521
- fixed neededforbuild 
3522
3523
-------------------------------------------------------------------
3524
Mon Oct 16 17:58:45 GMT 2000 - bk@suse.de
3525
3526
- s390: --with-gd=yes -> --with-gd=shared(broken somehow with =yes)
3527
3528
-------------------------------------------------------------------
3529
Mon Oct 16 16:56:41 MEST 2000 - rolf@suse.de
3530
3531
- update tp 4.0.3pl1 due to some security breaches
3532
- needed to drop db3 and dbm support, as these are incompatible
3533
- enable FTP support [BUG#3862]
3534
3535
-------------------------------------------------------------------
3536
Wed Sep 13 15:47:02 CEST 2000 - fober@suse.de
3537
3538
- s390: suse_update_config, needs-not-forbuild adabas
3539
3540
-------------------------------------------------------------------
3541
Fri Jul  7 11:51:33 CEST 2000 - kukuk@suse.de
3542
3543
- Fix Requires and need for build
3544
3545
-------------------------------------------------------------------
3546
Fri Jun 23 13:11:09 CEST 2000 - rolf@suse.de
3547
3548
- added support for mcal and calendar functions [BUG#2925]
3549
3550
-------------------------------------------------------------------
3551
Mon Jun 19 00:01:12 CEST 2000 - ro@suse.de
3552
3553
- fixed to compile with new postgres 
3554
3555
-------------------------------------------------------------------
3556
Mon May 22 13:50:13 CEST 2000 - rolf@suse.de
3557
3558
- update to 4.0.0
3559
- --with-java is now broken
3560
3561
-------------------------------------------------------------------
3562
Fri May 12 13:49:15 CEST 2000 - rolf@suse.de
3563
3564
- update to 4.0RC2
3565
- a few more options are now functional
3566
3567
-------------------------------------------------------------------
3568
Thu Apr 13 11:12:26 CEST 2000 - ro@suse.de
3569
3570
- added mm to neededforbuild
3571
3572
-------------------------------------------------------------------
3573
Thu Mar 30 14:43:10 MEST 2000 - rolf@suse.de
3574
3575
- new version 4.0RC1
3576
- many options now work properly
3577
3578
-------------------------------------------------------------------
3579
Wed Mar  1 18:14:36 MET 2000 - rolf@suse.de
3580
3581
- zlib works again
3582
3583
-------------------------------------------------------------------
3584
Tue Feb 22 15:05:20 MET 2000 - rolf@suse.de
3585
3586
- new version 4b4pl1
3587
- now with --enable-thread-safety --with-gd=yes --with-ttf
3588
- imap support is now broken
3589
3590
-------------------------------------------------------------------
3591
Thu Dec 23 13:18:18 MET 1999 - rolf@suse.de
3592
3593
- dynamic JDK path detection
3594
- some fixes in DAV, still doesn´t work
3595
- now also runs with IMAP
3596
3597
-------------------------------------------------------------------
3598
Thu Nov 25 12:18:31 MET 1999 - rolf@suse.de
3599
3600
- initial package version 4.0b3
3601
3602
3603