Commit graph

113 commits

Author SHA1 Message Date
taca
5680449532 Update php54 to 5.4.27. CVE-2013-7345 is already fixed in 5.4.26nb2.
03 Apr 2014, PHP 5.4.27

- Core:
  . Fixed bug #60602 (proc_open() changes environment array) (Tjerk)

- Fileinfo:
  . Fixed bug #66946 (fileinfo: extensive backtracking in awk rule regular
    expression). (CVE-2013-7345) (Remi)

- FPM:
  . Added clear_env configuration directive to disable clearenv() call.
  (Github PR# 598, Paul Annesley)

- GMP
  . fixed bug#66872 (invalid argument crashes gmp_testbit) (Pierre)

- Mail:
  . Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script) (Tjerk)

- MySQLi:
  . Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed)
  (Remi)

- Openssl:
  . Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1). (Remi)
2014-04-05 03:43:40 +00:00
taca
04453350ed Update php55 to 5.5.11.
CVE-2013-7345 is already fixed in 5.5.10nb2.


03 Apr 2014, PHP 5.5.11

- Core:
  . Allow zero length comparison in substr_compare() (Tjerk)
  . Fixed bug #60602 (proc_open() changes environment array) (Tjerk)

- SPL:
  . Added feature #65545 (SplFileObject::fread()) (Tjerk)

- cURL:
  . Fixed bug #66109 (Can't reset CURLOPT_CUSTOMREQUEST to default behaviour) (Tjerk)
  . Fix compilation on libcurl versions between 7.10.5 and 7.12.2, inclusive.
    (Adam)

- FPM:
  . Added clear_env configuration directive to disable clearenv() call.
  (Github PR# 598, Paul Annesley)

- Fileinfo:
  . Fixed bug #66946 (fileinfo: extensive backtracking in awk rule regular
    expression). (CVE-2013-7345) (Remi)

- GD:
  . Fixed bug #66714 (imageconvolution breakage). (Brad Daily)
  . Fixed bug #66869 (Invalid 2nd argument crashes imageaffinematrixget) (Pierre)
  . Fixed bug #66887 (imagescale - poor quality of scaled image). (Remi)
  . Fixed bug #66890 (imagescale segfault). (Remi)
  . Fixed bug #66893 (imagescale ignore method argument). (Remi)

- Hash:
  . hash_pbkdf2() now works correctly if the $length argument is not specified.
    (Nikita)

- Intl:
  . Fixed bug #66873 (A reproductible crash in UConverter when given invalid
    encoding) (Stas)

- Mail:
  . Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script) (Tjerk)

- MySQLi:
  . Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed)
  (Remi)

- OPCache
  . Added function opcache_is_script_cached(). (Danack)
  . Added information about interned strings usage. (Terry, Julien, Dmitry)

- Openssl:
  . Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1). (Remi)

- GMP
  . Fixed bug #66872 (invalid argument crashes gmp_testbit) (Pierre)

- SQLite:
  . Updated bundled libsqlite to 3.8.3.1 (Anatol)
2014-04-04 03:04:59 +00:00
taca
d26b5634a3 Update php55 to 5.5.10 (PHP 5.5.10).
Version 5.5.10

6-Mar-2014

* Core:

  - Fixed bug #66574 (Allow multiple paths in php_ini_scanned_path).

* Date:

  - Fixed bug #45528 (Allow the DateTimeZone constructor to accept timezones
    per offset too).

* Fileinfo:

  - Fixed bug #66731 (file: infinite recursion (CVE-2014-1943)).
  - Fixed bug #66820 (out-of-bounds memory access in fileinfo (CVE-2014-2270)).

* GD:

  - Fixed bug #66815 (imagecrop(): insufficient fix for NULL defer
    (CVE-2013-7327)).

* JSON:

  - Fixed bug #65753 (JsonSerializeable couldn't implement on module extension).
* LDAP:
  - Implemented ldap_modify_batch (https://wiki.php.net/rfc/ldap_modify_batch).
* Openssl:
  - Fixed bug #66501 (Add EC key support to php_openssl_is_private_key).

* PCRE:

  - Upgraded to PCRE 8.34.

* Pgsql:

  - Added warning for dangerous client encoding and remove possible injections
    for pg_insert()/pg_update()/pg_delete()/pg_select().
2014-03-09 14:09:20 +00:00
taca
d7d3bfe734 Update php54 to 5.4.26 (PHP 5.4.26).
Version 5.4.26

06-Mar-2014

* JSON:

  - Fixed bug #65753 (JsonSerializeable couldn't implement on module extension)

* Fileinfo:

  - Fixed bug #66731 (file: infinite recursion) (CVE-2014-1943).
  - Fixed bug #66820 (out-of-bounds memory access in fileinfo) (CVE-2014-2270).

* LDAP:

  - Implemented ldap_modify_batch (https://wiki.php.net/rfc/ldap_modify_batch).

* Openssl:

  - Fixed bug #66501 (Add EC key support to php_openssl_is_private_key).

* Pgsql:

  - Added warning for dangerous client encoding and remove possible injections
    for pg_insert()/pg_update()/pg_delete()/pg_select().
2014-03-09 14:08:16 +00:00
taca
0dc8fb7b7b Update php54 to 5.4.25.
06 Feb 2014, PHP 5.4.25

- Core:
  . Fixed bug #66286 (Incorrect object comparison with inheritance). (Nikita)
  . Fixed bug #66509 (copy() arginfo has changed starting from 5.4).
    (Will Fitch)

- mysqlnd
  . Fixed bug #66283 (Segmentation fault after memory_limit). (Johannes)

- PDO_pgsql:
  . Fixed bug #62479 (PDO-psql cannot connect if password contains spaces).
    (Will Fitch, Ilia)

- Session:
  . Fixed bug #66481 (Calls to session_name() segfault when session.name is
    null). (Laruence)
2014-02-07 15:36:07 +00:00
taca
17212df85f Update php55 to 5.5.9 (PHP 5.5.9).
06 Feb 2014, PHP 5.5.9

- Core:
  . Fixed bug #66509 (copy() arginfo has changed starting from 5.4). (willfitch)

- GD:
  . Fixed bug #66356 (Heap Overflow Vulnerability in imagecrop()).
    (Laruence, Remi)

- OPCache:
  . Fixed bug #66474 (Optimizer bug in constant string to boolean conversion).
    (Dmitry)
  . Fixed bug #66461 (PHP crashes if opcache.interned_strings_buffer=0).
    (Dmitry)
  . Fixed bug #66298 (ext/opcache/Optimizer/zend_optimizer.c has dos-style
    ^M as lineend). (Laruence)

- PDO_pgsql:
  . Fixed bug #62479 (PDO-psql cannot connect if password contains
spaces) (willfitch, iliaa)

- Readline
  . Fixed Bug #66412 (readline_clear_history() with libedit causes segfault after
    #65714). (Remi)

- Session
  . Fixed bug #66469 (Session module is sending multiple set-cookie headers when
    session.use_strict_mode=1) (Yasuo)
  . Fixed bug #66481 (Segfaults on session_name()).
    (cmcdermottroe at engineyard dot com, Yasuo)

- Standard
  . Fixed bug #66395 (basename function doesn't remove drive letter). (Anatol)

- Sockets:
  . Fixed bug #66381 (__ss_family was changed on AIX 5.3). (Felipe)

- Zend Engine
  . Fixed bug #66009 (Failed compilation of PHP extension with C++ std
    library using VS 2012). (Anatol)
2014-02-07 15:35:05 +00:00
taca
7c3bc3ee18 Update php55 to 5.5.8.
9 Jan 2014, PHP 5.5.8

- Core:
  . Disallowed JMP into a finally block. (Laruence)
  . Added validation of class names in the autoload process. (Dmitry)
  . Fixed invalid C code in zend_strtod.c. (Lior Kaplan)
  . Fixed bug #66041 (list() fails to unpack yielded ArrayAccess object).
    (Nikita)
  . Fixed bug #65764 (generators/throw_rethrow FAIL with
    ZEND_COMPILE_EXTENDED_INFO). (Nikita)
  . Fixed bug #61645 (fopen and O_NONBLOCK). (Mike)
  . Fixed bug #66218 (zend_register_functions breaks reflection). (Remi)

- Date:
  . Fixed bug #66060 (Heap buffer over-read in DateInterval). (Remi)
  . Fixed bug #65768 (DateTimeImmutable::diff does not work). (Nikita Nefedov)

- DOM:
  . Fixed bug #65196 (Passing DOMDocumentFragment to DOMDocument::saveHTML()
    Produces invalid Markup). (Mike)

- Exif:
  . Fixed bug #65873 (Integer overflow in exif_read_data()). (Stas)

- Filter:
  . Fixed bug #66229 (128.0.0.0/16 isn't reserved any longer). (Adam)

- GD:
  . Fixed bug #64405 (Use freetype-config for determining freetype2 dir(s)).
    (Adam)

- PDO_odbc:
  . Fixed bug #66311 (Stack smashing protection kills PDO/ODBC queries).
    (michael at orlitzky dot com)

- MySQLi:
  . Fixed bug #65486 (mysqli_poll() is broken on win x64). (Anatol)

- OPCache:
  . Fixed reavlidate_path=1 behavior to avoid caching of symlinks values.
    (Dmitry)
  . Fixed Issue #140: "opcache.enable_file_override" doesn't respect
    "opcache.revalidate_freq". (Dmitry).

- SNMP:
  . Fixed SNMP_ERR_TOOBIG handling for bulk walk operations. (Boris Lytochkin)

- SOAP
  . Fixed bug #66112 (Use after free condition in SOAP extension).
    (martin dot koegler at brz dot gv dot at)

- Sockets:
  . Fixed bug #65923 (ext/socket assumes AI_V4MAPPED is defined). (Felipe)

- XSL
  . Fixed bug #49634 (Segfault throwing an exception in a XSL registered
    function). (Mike)

- ZIP:
  . Fixed Bug #66321 (ZipArchive::open() ze_obj->filename_len not real). (Remi)
2014-01-11 17:05:09 +00:00
taca
030f48774f Update php to 5.4.24.
09 Jan 2014, PHP 5.4.24

- Core:
  . Added validation of class names in the autoload process. (Dmitry)
  . Fixed invalid C code in zend_strtod.c. (Lior Kaplan)
  . Fixed bug #61645 (fopen and O_NONBLOCK). (Mike)

- Date:
  . Fixed bug #66060 (Heap buffer over-read in DateInterval). (Remi)
  . Fixed bug #63391 (Incorrect/inconsistent day of week prior to the year
    1600). (Derick, T. Carter)
  . Fixed bug #61599 (Wrong Day of Week). (Derick, T. Carter)

- DOM:
  . Fixed bug #65196 (Passing DOMDocumentFragment to DOMDocument::saveHTML()
    Produces invalid Markup). (Mike)

- Exif:
  . Fixed bug #65873 (Integer overflow in exif_read_data()). (Stas)

- Filter:
  . Fixed bug #66229 (128.0.0.0/16 isn't reserved any longer). (Adam)

- GD:
  . Fixed bug #64405 (Use freetype-config for determining freetype2 dir(s)).
    (Adam)

- PDO_odbc:
  . Fixed bug #66311 (Stack smashing protection kills PDO/ODBC queries).
    (michael at orlitzky dot com)

- SNMP:
  . Fixed SNMP_ERR_TOOBIG handling for bulk walk operations. (Boris Lytochkin)

- XSL
  . Fixed bug #49634 (Segfault throwing an exception in a XSL registered
    function). (Mike)

- ZIP:
  . Fixed Bug #66321 (ZipArchive::open() ze_obj->filename_len not real). (Remi)
2014-01-11 17:03:57 +00:00
taca
1fbdeb047a Update php55 to 5.5.7 (PHP 5.5.7).
12 Dec 2013, PHP 5.5.7

- CLI server:
  . Added some MIME types to the CLI web server (Chris Jones)
  . Implemented FR #65917 (getallheaders() is not supported by the built-in web
    server) - also implements apache_response_headers() (Andrea Faulds)

- Core:
  . Fixed bug #66094 (unregister_tick_function tries to cast a Closure to a
    string). (Laruence)

- OPCache
  . Fixed bug #66176 (Invalid constant substitution). (Dmitry)
  . Fixed bug #65915 (Inconsistent results with require return value). (Dmitry)
  . Fixed bug #65559 (Opcache: cache not cleared if changes occur while
    running). (Dmitry)

- OpenSSL:
  . Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420).
    (Stefan Esser).

- readline
  . Fixed Bug #65714 (PHP cli forces the tty to cooked mode). (Remi)
2013-12-13 15:33:22 +00:00
taca
c93eaad499 Update php54 to 5.4.23 (PHP 5.4.23).
28 Nov 2013, PHP 5.4.23

- Core:
  . Fixed bug #66094 (unregister_tick_function tries to cast a Closure to a
    string). (Laruence)
  . Fixed bug #65947 (basename is no more working after fgetcsv in certain
    situation). (Laruence)

- JSON
  . Fixed whitespace part of bug #64874 ("json_decode handles whitespace and
    case-sensitivity incorrectly"). (Andrea Faulds)

- MySQLi:
  . Fixed bug #66043 (Segfault calling bind_param() on mysqli). (Laruence)

- mysqlnd:
  . Fixed bug #66124 (mysqli under mysqlnd loses precision when bind_param
    with 'i'). (Andrey)
  . Fixed bug #66141 (mysqlnd quote function is wrong with NO_BACKSLASH_ESCAPES
    after failed query). (Andrey)

- OpenSSL:
  . Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420).
    (Stefan Esser).

- PDO
  . Fixed bug 65946 (sql_parser permanently converts values bound to strings)
2013-12-13 15:32:21 +00:00
taca
aafaa1a039 Update php53 to 5.3.28 (PHP 5.3.28).
12 Dec 2013, PHP 5.3.28

- Openssl:
  . Fixed handling null bytes in subjectAltName (CVE-2013-4073).
    (Christian Heimes)
  . Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420).
    (Stefan Esser).
2013-12-13 15:30:35 +00:00
taca
2be87cd2b3 Update php54 to 5.4.22.
Version 5.4.22
14-Nov-2013

* Core:

    - Fixed bug #65911 (scope resolution operator - strange behavior with
      $this).

CLI server:

    - Fixed bug #65818 (Segfault with built-in webserver and chunked transfer
      encoding).

* Exif:

    - Fixed crash on unknown encoding.

* FTP:

    - Fixed bug #65667 (ftp_nb_continue produces segfault).

* ODBC:

    - Fixed bug #65950 (Field name truncation if the field name is bigger than
      32 characters).

* Sockets:

    - Fixed bug #65808 (the socket_connect() won't work with IPv6 address).

* Standard:

    - Fixed bug #64760 (var_export() does not use full precision for
      floating-point numbers).

* XMLReader:

    - Fixed bug #51936 (Crash with clone XMLReader).
    - Fixed bug #64230 (XMLReader does not suppress errors).
2013-11-16 09:45:26 +00:00
taca
3d3ac75faf Update php55 package to 5.5.6.
14 Nov 2013, PHP 5.5.6

- Core:
  . Fixed bug #65947 (basename is no more working after fgetcsv in certain
    situation). (Laruence)
  . Improved performance of array_merge() and func_get_args() by eliminating
    useless copying. (Dmitry)
  . Fixed bug #65939 (Space before ";" breaks php.ini parsing).
    (brainstorm at nopcode dot org)
  . Fixed bug #65911 (scope resolution operator - strange behavior with $this).
    (Bob Weinand)
  . Fixed bug #65936 (dangling context pointer causes crash). (Tony)

- FPM:
  . Changed default listen() backlog to 65535. (Tony)

- MySQLi:
  . Fixed bug #66043 (Segfault calling bind_param() on mysqli). (Laruence)

- OPcache
  . Increased limit for opcache.max_accelerated_files to 1,000,000. (Chris)
  . Fixed issue #115 (path issue when using phar). (Dmitry)
  . Fixed issue #149 (Phar mount points not working with OPcache enabled).
  (Dmitry)

- ODBC
  . Fixed bug #65950 (Field name truncation if the field name is bigger than
    32 characters). (patch submitted by: michael dot y at zend dot com, Yasuo)

- PDO:
  . Fixed bug #66033 (Segmentation Fault when constructor of PDO statement
    throws an exception). (Laruence)
  . Fixed bug 65946 (sql_parser permanently converts values bound to strings)

- Standard:
  . Fixed bug #64760 (var_export() does not use full precision for floating-point
    numbers) (Yasuo)
2013-11-15 16:33:14 +00:00
taca
a8f12bfe2c Update php55 to 5.5.5.
17 Oct 2013, PHP 5.5.5

- Core:
  . Fixed bug #64979 (Wrong behavior of static variables in closure generators).
    (Nikita)
  . Fixed bug #65322 (compile time errors won't trigger auto loading). (Nikita)
  . Fixed bug #65821 (By-ref foreach on property access of string offset
    segfaults). (Nikita)

- CLI server:
  . Fixed bug #65633 (built-in server treat some http headers as
    case-sensitive). (Adam)
  . Fixed bug #65818 (Segfault with built-in webserver and chunked transfer
    encoding). (Felipe)
  . Added application/pdf to PHP CLI Web Server mime types (Chris Jones)

- Datetime:
  . Fixed bug #64157 (DateTime::createFromFormat() reports confusing error
    message). (Boro Sitnikovski)
  . Fixed bug #65502 (DateTimeImmutable::createFromFormat returns DateTime).
    (Boro Sitnikovski)
  . Fixed bug #65548 (Comparison for DateTimeImmutable doesn't work).
    (Boro Sitnikovski)

- DBA extension:
  . Fixed bug #65708 (dba functions cast $key param to string in-place,
    bypassing copy on write). (Adam)

- Filter:
  . Add RFC 6598 IPs to reserved addresses. (Sebastian Nohn)
  . Fixed bug #64441 (FILTER_VALIDATE_URL rejects fully qualified domain names).
    (Syra)

- FTP:
  . Fixed bug #65667 (ftp_nb_continue produces segfault). (Philip Hofstetter)

- GD
  . Ensure that the defined interpolation method is used with the generic
    scaling methods. (Pierre)

- IMAP:
  . Fixed bug #65721 (configure script broken in 5.5.4 and 5.4.20 when enabling
    imap). (ryotakatsuki at gmail dot com)

- OPcache:
  . Added support for GNU Hurd. (Svante Signell)
  . Added function opcache_compile_file() to load PHP scripts into cache
    without execution. (Julien)
  . Fixed bug #65845 (Error when Zend Opcache Optimizer is fully enabled).
    (Dmitry)
  . Fixed bug #65665 (Exception not properly caught when opcache enabled).
    (Laruence)
  . Fixed bug #65510 (5.5.2 crashes in _get_zval_ptr_ptr_var). (Dmitry)
  . Fixed issue #135 (segfault in interned strings if initial memory is too
    low). (Julien)

- Sockets:
  . Fixed bug #65808 (the socket_connect() won't work with IPv6 address).
    (Mike)

- SPL:
  . Fix bug #64782 (SplFileObject constructor make $context optional / give it
    a default value). (Nikita)

- Standard:
  . Fixed bug #61548 (content-type must appear at the end of headers for 201
    Location to work in http). (Mike)

- XMLReader:
  . Fixed bug #51936 (Crash with clone XMLReader). (Mike)
  . Fixed bug #64230 (XMLReader does not suppress errors). (Mike)

- Build system:
  . Fixed bug #51076 (race condition in shtool's mkdir -p implementation).
    (Mike, Raphael Geissert)
  . Fixed bug #62396 ('make test' crashes starting with 5.3.14 (missing
    gzencode())). (Mike)
2013-10-18 15:49:07 +00:00
taca
c75f2f0e40 Update php54 to 5.4.21 (PHP 5.4.21).
17 Oct 2013, PHP 5.4.21

- Core:
  . Fixed bug #65322 (compile time errors won't trigger auto loading). (Nikita)

- CLI server:
  . Fixed bug #65633 (built-in server treat some http headers as
    case-sensitive). (Adam)

- Datetime:
  . Fixed bug #64157 (DateTime::createFromFormat() reports confusing error
    message). (Boro Sitnikovski)

- DBA extension:
  . Fixed bug #65708 (dba functions cast $key param to string in-place,
    bypassing copy on write). (Adam)

- Filter:
  . Add RFC 6598 IPs to reserved addresses. (Sebastian Nohn)
  . Fixed bug #64441 (FILTER_VALIDATE_URL rejects fully qualified domain names).
    (Syra)

- IMAP:
  . Fixed bug #65721 (configure script broken in 5.5.4 and 5.4.20 when enabling
    imap). (ryotakatsuki at gmail dot com)

- Standard:
  . Fixed bug #61548 (content-type must appear at the end of headers for 201
    Location to work in http). (Mike)

- Build system:
  . Fixed bug #62396 ('make test' crashes starting with 5.3.14 (missing
    gzencode())). (Mike)
2013-10-18 12:25:12 +00:00
taca
af211b350d Update php55 to 5.5.4, approved by wiz@.
18 Sep 2013, PHP 5.5.4

- Core:
  . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation).
    (Laruence)
  . Improved fputcsv() to allow specifying escape character.
  . Fixed bug #65490 (Duplicate calls to get lineno & filename for
    DTRACE_FUNCTION_*). (Chris Jones)
  . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding
    spaces). (Michael M Slusarz)
  . Fixed bug #65470 (Segmentation fault in zend_error() with
    --enable-dtrace). (Chris Jones, Kris Van Hees)
  . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert)
  . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees)
  . Fixed bug #61759 (class_alias() should accept classes with leading
    backslashes). (Julien)
  . Fixed bug #46311 (Pointer aliasing issue results in miscompile on gcc4.4).
    (Nikita Popov)

- cURL:
  . Fixed bug #65458 (curl memory leak). (Adam)

- Datetime:
  . Fixed bug #65554 (createFromFormat broken when weekday name is followed
    by some delimiters). (Valentin Logvinskiy, Stas).
  . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught
    by AddressSanitizer). (Remi).

- OPCache:
  . Fixed bug #65561 (Zend Opcache on Solaris 11 x86 needs ZEND_MM_ALIGNMENT=4).
    (Terry Ellison)

- Openssl:
  . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in
    some cases). (Mark Jones)

- Session:
  . Fixed bug #65475 (Session ID is not initialized properly when strict session
    is enabled). (Yasuo)
  . Fixed bug #51127/#65359 Request #25630/#43980/#54383 (Added php_serialize
    session serialize handler that uses plain serialize()). (Yasuo)

- Standard:
  . Fix issue with return types of password API helper functions. Found via
    static analysis by cjones. (Anthony Ferrara)
2013-09-21 16:08:37 +00:00
taca
b04633b3e7 Update php54 to 5.4.20, approved by wiz@.
19 Sep 2013, PHP 5.4.20

- Core:
  . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation).
    (Laruence)
  . Fixed bug #65579 (Using traits with get_class_methods causes segfault).
    (Adam)
  . Fixed bug #65490 (Duplicate calls to get lineno & filename for
    DTRACE_FUNCTION_*). (Chris Jones)
  . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding
    spaces). (Michael M Slusarz)
  . Fixed bug #65481 (shutdown segfault due to serialize) (Mike)
  . Fixed bug #65470 (Segmentation fault in zend_error() with
    --enable-dtrace). (Chris Jones, Kris Van Hees)
  . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference
    fails). (Laruence)
  . Fixed bug #65304 (Use of max int in array_sum). (Laruence)
  . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very
    limited case). (Arpad)
  . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert)
  . Improved fix for bug #63186 (compile failure on netbsd). (Matteo)
  . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees)
  . Fixed bug #61759 (class_alias() should accept classes with leading
    backslashes). (Julien)
  . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold)
  . Cherry-picked some DTrace build commits (allowing builds on Linux,
    bug #62691, and bug #63706) from PHP 5.5 branch
  . Fixed bug #61268 (--enable-dtrace leads make to clobber
    Zend/zend_dtrace.d) (Chris Jones)

- cURL:
  . Fixed bug #65458 (curl memory leak). (Adam)

- Datetime:
  . Fixed bug #65554 (createFromFormat broken when weekday name is followed
    by some delimiters). (Valentin Logvinskiy, Stas).
  . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught
    by AddressSanitizer). (Remi).

- Openssl:
  . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in
    some cases). (Mark Jones)

- Session:
  . Fixed bug #62129 (rfc1867 crashes php even though turned off). (gxd305 at
    gmail dot com)
  . Fixed bug #50308 (session id not appended properly for empty anchor tags).
    (Arpad)
  . Fixed possible buffer overflow under Windows. Note: Not a security fix.
    (Yasuo)
  . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo)

- SOAP:
  . Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry)

- SPL:
  . Fixed bug #65328 (Segfault when getting SplStack object Value). (Laruence)

- PDO:
  . Fixed bug #64953 (Postgres prepared statement positional parameter
    casting). (Mike)

- Phar:
  . Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for
    some specific contents). (Stas)

- Pgsql:
  . Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
    (Yasuo)
  . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update()
    /pg_delete()/pg_insert()). (Yasuo)

- Zlib:
  . Fixed bug #65391 (Unable to send vary header user-agent when
    ob_start('ob_gzhandler') is called) (Mike)
2013-09-21 16:06:07 +00:00
taca
558212ae2d Update php55 to 5.5.3.
22 Aug 2013, PHP 5.5.3

- Openssl:
  . Fixed UMR in fix for CVE-2013-4248.
2013-08-23 03:12:49 +00:00
taca
0ee7ff105d Update php54 to 5.4.19.
22 Aug 2013, PHP 5.4.19
- Core:
  . Fixed bug #64503 (Compilation fails with error: conflicting types for
    'zendparse'). (Laruence)

- Openssl:
  . Fixed UMR in fix for CVE-2013-4248.
2013-08-23 03:11:55 +00:00
taca
bea2b7500c Need to update PHP55_VERSION. Thanks to joerg@ who noted to me. 2013-08-18 20:56:32 +00:00
taca
4dd9976760 Update php54 to 5.4.18.
15 Aug 2013, PHP 5.4.18

- Core:
  . Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was
    erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey
    avp200681 gmail com).
  . Fixed bug #65254 (Exception not catchable when exception thrown in autoload
    with a namespace). (Laruence)
  . Fixed bug #65108 (is_callable() triggers Fatal Error).
    (David Soria Parra, Laruence)
  . Fixed bug #65088 (Generated configure script is malformed on OpenBSD).
    (Adam)
  . Fixed bug #62964 (Possible XSS on "Registered stream filters" info).
    (david at nnucomputerwhiz dot com)
  . Fixed bug #62672 (Error on serialize of ArrayObject). (Lior Kaplan)
  . Fixed bug #62475 (variant_* functions causes crash when null given as an
    argument). (Felipe)
  . Fixed bug #60732 (php_error_docref links to invalid pages). (Jakub Vrana)
  . Fixed bug #65226 (chroot() does not get enabled). (Anatol)

- CGI:
  . Fixed Bug #65143 (Missing php-cgi man page). (Remi)

- CLI server:
  . Fixed bug #65066 (Cli server not responsive when responding with 422 http
    status code). (Adam)

- CURL:
  . Fixed bug #62665 (curl.cainfo doesn't appear in php.ini). (Lior Kaplan)

- FPM:
  . Fixed bug #63983 (enabling FPM borks compile on FreeBSD).
    (chibisuke at web dot de, Felipe)

- FTP:
  . Fixed bug #65228 (FTPs memory leak with SSL).
    (marco dot beierer at mbsecurity dot ch)

- GMP:
  . Fixed bug #65227 (Memory leak in gmp_cmp second parameter). (Felipe)

- Imap:
  . Fixed bug #64467 (Segmentation fault after imap_reopen failure).
    (askalski at gmail dot com)

- Intl:
  . Fixed bug #62759 (Buggy grapheme_substr() on edge case). (Stas)
  . Fixed bug #61860 (Offsets may be wrong for grapheme_stri* functions).
    (Stas)

- mysqlnd:
  . Fixed segfault in mysqlnd when doing long prepare. (Andrey)

- ODBC:
  . Fixed bug #61387 (NULL valued anonymous column causes segfault in
    odbc_fetch_array). (Brandon Kirsch)

- Openssl:
  . Fixed handling null bytes in subjectAltName (CVE-2013-4073).
    (Christian Heimes)

- PDO:
  . Allowed PDO_OCI to compile with Oracle Database 12c client libraries.
    (Chris Jones)

- PDO_dblib:
  . Fixed bug #65219 (PDO/dblib not working anymore ("use dbName" not sent)).
    (Stanley Sufficool)

- PDO_pgsql:
  . Fixed meta data retrieve when OID is larger than 2^31. (Yasuo)

- Phar:
  . Fixed Bug #65142 (Missing phar man page). (Remi)

- Session
  . Fixed bug #62535 ($_SESSION[$key]["cancel_upload"] doesn't work as
    documented). (Arpad)
  . Fixed bug #35703 (when session_name("123") consist only digits,
    should warning). (Yasuo)
  . Fixed bug #49175 (mod_files.sh does not support hash bits). Patch by
    oorza2k5 at gmail dot com (Yasuo)

- Sockets:
  . Implemented FR #63472 (Setting SO_BINDTODEVICE with socket_set_option).
    (Damjan Cvetko)

- SPL:
  . Fixed bug #65136 (RecursiveDirectoryIterator segfault). (Laruence)
  . Fixed bug #61828 (Memleak when calling Directory(Recursive)Iterator
    /Spl(Temp)FileObject ctor twice). (Laruence)
  . Fixed bug #60560 (SplFixedArray un-/serialize, getSize(), count() return 0,
    keys are strings). (Adam)

- XML:
  . Fixed bug #65236 (heap corruption in xml parser, CVE-2013-4113). (Rob)
2013-08-16 15:28:23 +00:00
taca
ef1cbc9e4c Correct checking condition of PHP_CHECK_INSTALLED. 2013-08-14 14:53:03 +00:00
taca
06eeb89332 * Add php55 support.
* Make PKG_PHP's value as description in comment.
2013-07-29 16:38:12 +00:00
taca
45492d07f0 Clean up php's framework.
* Define PHP's version at one place.
* Remove obsolete description in comments.
* Add "used by www/php-fpm/Makefile" in php5[34]/Makefile.php.
* Remove commented out support for suhosin extension from php54.
* Add PHP_CHECK_INSTALLED and PHP_EXTENSION_DIR to php/phpversion.mk.

No functional should be made.
2013-07-21 17:29:47 +00:00
taca
0e7b42e829 Update PHP53_VERSION to 5.3.27. 2013-07-12 00:09:14 +00:00
taca
d378e8ba37 Make PHP54_VERSION to 5.4.17. 2013-07-07 16:22:21 +00:00
taca
7015c34b75 Update PHP53_VERSION and PHP54_VERSION. 2013-06-07 13:56:25 +00:00
taca
c4e7d4a4ee Update PHP53_VERSION and PHP54_VERSION. It should be updated with
last update of php53/php54.
2013-06-03 15:23:14 +00:00
taca
cc160d4233 Update PHP53_VERSION and PHP54_VERSION. 2013-04-12 17:01:46 +00:00
taca
bc92f55652 * Make default version of PHP to 5.4: PHP_VERSION_DEFAULT's default is 54.
* Update PHP53_VERSION and PHP54_VERSION.
2013-03-16 02:02:13 +00:00
taca
4f0e2257cc Update PHP53_VERSION and PHP54_VERSION. 2013-02-22 03:08:22 +00:00
taca
5e0eb25a21 Switch php53 to t.3.21. 2013-01-17 16:19:33 +00:00
taca
85c09a581c Switch php54 to 5.4.11. 2013-01-17 15:49:11 +00:00
taca
54af9d7921 Update PHP53_VERSION and PHP54_VERSION to make match to php53 and php54. 2013-01-07 14:26:14 +00:00
taca
5289ca26ba Update versions of php53 and php54 for PHP extensions.
Reset PKGREVISION of database/php-ldap.
2012-11-23 13:22:51 +00:00
taca
4179122553 Update definition of PHP version for php53 and php54. 2012-10-19 14:59:15 +00:00
cheusov
98a0ec4f42 Move documentation for *_REQD variables to "Infrastructure variables"
as suggested by obache@
2012-10-03 23:48:00 +00:00
cheusov
d9d49610f9 Update documentation for {PYTHON,RUBY,PHP}_VERSION_REQD variables, move them
to "user variables" section.  pkglint is now aware of them.  Bump pkglint
version.  Oked by wiz@
2012-09-16 20:03:50 +00:00
taca
ac59301e61 Update PHP53_VERSION and PHP54_VERSION. 2012-09-14 15:54:22 +00:00
taca
a98fe022a1 Remove remained codes for PHP 5.2.x. 2012-08-17 15:38:19 +00:00
taca
608d4e1e9b Update PHP53_VERSION and PHP54_VERSION. 2012-08-17 15:37:30 +00:00
taca
421d7a3d65 Update PHP53_VERSION and PHP54_VERSION noted by Uwe Klaus. 2012-07-25 10:50:12 +00:00
taca
e84e46bef8 Remove support for php5 (PHP 5.2.x). 2012-06-16 15:18:13 +00:00
taca
176439945e Update of frame work for PHP and support for PHP 5.4.x.
* PHP_VERSION_DEFAULT, PHP_VERSIONS_ACCEPTED, PKG_PHP_VERSION now
  don't accept 5 any more but 52, 53, 54.
  Each value corresponding to PHP 5.2.x, 5.3.x, 5.4.x.
* PHP_PKG_PREFIX might be "php54".
* phpversion.mk defines PHP_BASE_VERS.
* phpversion.mk defines each PHP's exact version for now.

TODO:
	php{5,53,54}/Makefile.{common,php} could be arranged to some
	redundant codes.
2012-06-16 02:47:51 +00:00
obache
d74bd35143 PKG_PHP_VERSION may be 52 for some situation. 2012-05-12 11:27:46 +00:00
obache
edbcee2144 * allow to specify phpize sub directory with PHPSETUPSUBDIR.
* allow to override DIST_SUBDIR
2012-05-12 08:23:34 +00:00
taca
02eb740d5d Correct default value in description of PHP_VERSION_DEFAULT. 2012-05-04 16:07:51 +00:00
obache
7e5c33ea25 Note warning about PECL_LEGACY_VERSION_SCHEME. 2012-01-27 01:55:27 +00:00
joerg
2bb5313796 Catch up with PHP 5.3 base. 2012-01-12 18:25:50 +00:00
obache
bdaf2325dc Change default PKGNAME scheme for PECL packages.
Drop ${PHP_BASE_VARS} from PKGVERSION by default.

It used to be required to support multiple php version.
But after PHP version based ${PHP_PKG_PREFIX} was introduced,
such trick is not required anymore.
In addition to this, such version name schme invokes unwanted version bump
when base php version is bumped, plus, such version scheme is hard to
use for DEPENDS pattern.

To avoid downgrading of package using such legacy version scheme,
PECL_LEGACY_VERSION_SCHEME is introduced.
If it is defined, current version scheme is still used for currently
supported PHP version (5 and 53), but instead of ${PHP_BASE_VARS},
current fixed PHP base version in pkgsrc is used to avoid unwanted version bump
from update of PHP base package.
With newer PHP (54, or so on), new version scheme will be used if
it is defined.
This trick will not be required and should be removed after php5 and php53 will
be gone away from pkgsrc.
2011-12-17 13:46:27 +00:00