Commit graph

30 commits

Author SHA1 Message Date
taca
e997573e72 Update php54 to 5.4.32 (PHP 5.4.32).
07 Aug 2014, PHP 5.4.32

- Core:
  . Fixed bug #67717 (segfault in dns_get_record). (CVE-2014-3597) (Remi)

- COM:
  . Fixed missing type checks in com_event_sink. (Yussuf Khalil, Stas)

- Fileinfo:
  . Fixed bug #67705 (extensive backtracking in rule regular expression).
    (CVE-2014-3538) (Remi)
  . Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587) (Remi)

- GD:
  . Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference).
    (CVE-2014-2497) (Remi)
  . Fixed bug #67730 (Null byte injection possible with imagexxx functions).
    (CVE-2014-5120) (Ryan Mauger)

- Milter:
  . Fixed bug #67715 (php-milter does not build and crashes randomly). (Mike)

- OpenSSL:
  . Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas).

- Readline:
  . Fixed bug #55496 (Interactive mode doesn't force a newline before the
    prompt). (Bob, Johannes)
  . Fixed bug #67496 (Save command history when exiting interactive shell
    with control-c). (Dmitry Saprykin, Johannes)

- Sessions:
  . Fixed missing type checks in php_session_create_id (Yussuf Khalil, Stas).

- SPL:
  . Fixed bug #67539 (ArrayIterator use-after-free due to object change during
    sorting). (research at insighti dot org, Laruence)
  . Fixed bug #67538 (SPL Iterators use-after-free). (CVE-2014-4670) (Laruence)

- Core:
  . Fixed bug #67693 (incorrect push to the empty array) (Tjerk)

- ODBC:
  . Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte
    char fields). (Keyur)

- Zlib:
  . Fixed bug #67724 (chained zlib filters silently fail with large amounts of
    data). (Mike)
2014-08-23 16:07:24 +00:00
taca
60facf7055 Update php54 to 5.4.31.
24 Jul 2014, PHP 5.4.31

- Core:
  . Fixed bug #67428 (header('Location: foo') will override a 308-399 response
    code). (Adam)
  . Fixed bug #67436 (Autoloader isn't called if two method definitions don't
    match). (Bob)
  . Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0).
    (Ferenc)
  . Fixed bug #67151 (strtr with empty array crashes). (Nikita)
  . Fixed bug #67407 (Windows 8.1/Server 2012 R2 reported as Windows 8/Server
    2012). (Christian Wenz)

- CLI server:
  . Implemented FR #67429 (CLI server is missing some new HTTP response codes).
    (Adam)
  . Fixed bug #66830 (Empty header causes PHP built-in web server to hang).
    (Adam)

- FPM:
  . Fixed bug #67530 (error_log=syslog ignored). (Remi)
  . Fixed bug #67531 (syslog cannot be set in pool configuration). (Remi)

- Intl:
  . Fixed bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting).
    (Stas)

- pgsql:
  . Fixed bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756),
    which affected builds against libpq < 7.3. (Adam)

- Phar:
  . Fixed bug #67587 (Redirection loop on nginx with FPM). (Christian Weiske)

- Streams:
  . Fixed bug #67430 (http:// wrapper doesn't follow 308 redirects). (Adam)
2014-07-26 00:12:53 +00:00
taca
afa36cf315 Add fix for CVE-2014-4698 and CVE-2014-4670.
Bump PKGREVISION.
2014-07-13 15:25:03 +00:00
fhajny
ef406dfd0d Remove detection of a threaded Apache MPM at configure time.
Fixes the problem where thread safety was not consistent in
the php, ap-php and php-* extension packages, and makes ap-php
adhere to the maintainer-zts option. Bump PKGREVISION.
2014-06-13 14:31:19 +00:00
fhajny
7bc1f7f9f0 Fix problems on SunOS with the combination of FPM, event ports and catch_workers_output=yes.
See https://bugs.php.net/bug.php?id=65800.
2014-06-13 14:09:34 +00:00
he
b8f3a9e9b0 Apply a patch to fix CVE-2014-2497, taken from
https://bugs.php.net/patch-display.php?bug_id=66901
Bump PKGREVISION for php-gd correspondingly.
2014-05-11 11:20:47 +00:00
taca
c148e7126f Update php54 to 5.4.28.
01 May 2014, PHP 5.4.28

- Core:
  . Fixed bug #61019 (Out of memory on command stream_get_contents). (Mike)
  . Fixed bug #64330 (stream_socket_server() creates wrong Abstract Namespace
    UNIX sockets). (Mike)
  . Fixed bug #66171 (Symlinks and session handler allow open_basedir bypass).
    (Jann Horn, Stas)
  . Fixed bug #66182 (exit in stream filter produces segfault). (Mike)
  . Fixed bug #66736 (fpassthru broken). (Mike)
  . Fixed bug #67024 (getimagesize should recognize BMP files with negative
    height). (Gabor Buella)

- cURL:
  . Fixed bug #66562 (curl_exec returns differently than curl_multi_getcontent).
    (Freek Lijten)

- Date:
  . Fixed bug #66721 (__wakeup of DateTime segfaults when invalid object data is
    supplied). (Boro Sitnikovski)

- Embed:
  . Fixed bug #65715 (php5embed.lib isn't provided anymore). (Anatol)

- Fileinfo:
  . Fixed bug #66987 (Memory corruption in fileinfo ext / bigendian).
    (Remi)

- FPM:
  . Fixed bug #66482 (unknown entry 'priority' in php-fpm.conf).
  . Fixed bug #67060 (sapi/fpm: possible privilege escalation due to insecure
    default configuration) (CVE-2014-0185). (Stas)

- JSON:
  . Fixed bug #66021 (Blank line inside empty array/object when
    JSON_PRETTY_PRINT is set). (Kevin Israel)

- LDAP:
  . Fixed issue with null bytes in LDAP bindings. (Matthew Daley)

- OpenSSL:
  . Fix bug #66942 (memory leak in openssl_seal()). (Chuan Ma)
  . Fix bug #66952 (memory leak in openssl_open()). (Chuan Ma)

- SimpleXML:
  . Fixed bug #66084 (simplexml_load_string() mangles empty node name)
    (Anatol)

- XSL:
  . Fixed bug #53965 (<xsl:include> cannot find files with relative paths
    when loaded with "file://"). (Anatol)

- Apache2 Handler SAPI:
  . Fixed Apache log issue caused by APR's lack of support for %zu
    (APR issue https://issues.apache.org/bugzilla/show_bug.cgi?id=56120).
    (Jeff Trawick)
2014-05-02 13:04:12 +00:00
taca
5680449532 Update php54 to 5.4.27. CVE-2013-7345 is already fixed in 5.4.26nb2.
03 Apr 2014, PHP 5.4.27

- Core:
  . Fixed bug #60602 (proc_open() changes environment array) (Tjerk)

- Fileinfo:
  . Fixed bug #66946 (fileinfo: extensive backtracking in awk rule regular
    expression). (CVE-2013-7345) (Remi)

- FPM:
  . Added clear_env configuration directive to disable clearenv() call.
  (Github PR# 598, Paul Annesley)

- GMP
  . fixed bug#66872 (invalid argument crashes gmp_testbit) (Pierre)

- Mail:
  . Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script) (Tjerk)

- MySQLi:
  . Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed)
  (Remi)

- Openssl:
  . Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1). (Remi)
2014-04-05 03:43:40 +00:00
he
8fd043d847 Apply patch to fix CVE-2013-7345.
OK'ed by wiz.
2014-03-29 22:06:06 +00:00
asau
b34b1b4288 Stop treating FreeBSD 10 as FreeBSD 1.
This lets a number of PHP extensions build.
Bump package revision.
2014-03-19 21:50:22 +00:00
taca
030f48774f Update php to 5.4.24.
09 Jan 2014, PHP 5.4.24

- Core:
  . Added validation of class names in the autoload process. (Dmitry)
  . Fixed invalid C code in zend_strtod.c. (Lior Kaplan)
  . Fixed bug #61645 (fopen and O_NONBLOCK). (Mike)

- Date:
  . Fixed bug #66060 (Heap buffer over-read in DateInterval). (Remi)
  . Fixed bug #63391 (Incorrect/inconsistent day of week prior to the year
    1600). (Derick, T. Carter)
  . Fixed bug #61599 (Wrong Day of Week). (Derick, T. Carter)

- DOM:
  . Fixed bug #65196 (Passing DOMDocumentFragment to DOMDocument::saveHTML()
    Produces invalid Markup). (Mike)

- Exif:
  . Fixed bug #65873 (Integer overflow in exif_read_data()). (Stas)

- Filter:
  . Fixed bug #66229 (128.0.0.0/16 isn't reserved any longer). (Adam)

- GD:
  . Fixed bug #64405 (Use freetype-config for determining freetype2 dir(s)).
    (Adam)

- PDO_odbc:
  . Fixed bug #66311 (Stack smashing protection kills PDO/ODBC queries).
    (michael at orlitzky dot com)

- SNMP:
  . Fixed SNMP_ERR_TOOBIG handling for bulk walk operations. (Boris Lytochkin)

- XSL
  . Fixed bug #49634 (Segfault throwing an exception in a XSL registered
    function). (Mike)

- ZIP:
  . Fixed Bug #66321 (ZipArchive::open() ze_obj->filename_len not real). (Remi)
2014-01-11 17:03:57 +00:00
taca
78a978b0a1 Add fix for CVE-2013-6712, ext/date DoS vulnerability.
Bump PKGREVISION.
2013-12-05 16:16:40 +00:00
taca
b04633b3e7 Update php54 to 5.4.20, approved by wiz@.
19 Sep 2013, PHP 5.4.20

- Core:
  . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation).
    (Laruence)
  . Fixed bug #65579 (Using traits with get_class_methods causes segfault).
    (Adam)
  . Fixed bug #65490 (Duplicate calls to get lineno & filename for
    DTRACE_FUNCTION_*). (Chris Jones)
  . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding
    spaces). (Michael M Slusarz)
  . Fixed bug #65481 (shutdown segfault due to serialize) (Mike)
  . Fixed bug #65470 (Segmentation fault in zend_error() with
    --enable-dtrace). (Chris Jones, Kris Van Hees)
  . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference
    fails). (Laruence)
  . Fixed bug #65304 (Use of max int in array_sum). (Laruence)
  . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very
    limited case). (Arpad)
  . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert)
  . Improved fix for bug #63186 (compile failure on netbsd). (Matteo)
  . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees)
  . Fixed bug #61759 (class_alias() should accept classes with leading
    backslashes). (Julien)
  . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold)
  . Cherry-picked some DTrace build commits (allowing builds on Linux,
    bug #62691, and bug #63706) from PHP 5.5 branch
  . Fixed bug #61268 (--enable-dtrace leads make to clobber
    Zend/zend_dtrace.d) (Chris Jones)

- cURL:
  . Fixed bug #65458 (curl memory leak). (Adam)

- Datetime:
  . Fixed bug #65554 (createFromFormat broken when weekday name is followed
    by some delimiters). (Valentin Logvinskiy, Stas).
  . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught
    by AddressSanitizer). (Remi).

- Openssl:
  . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in
    some cases). (Mark Jones)

- Session:
  . Fixed bug #62129 (rfc1867 crashes php even though turned off). (gxd305 at
    gmail dot com)
  . Fixed bug #50308 (session id not appended properly for empty anchor tags).
    (Arpad)
  . Fixed possible buffer overflow under Windows. Note: Not a security fix.
    (Yasuo)
  . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo)

- SOAP:
  . Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry)

- SPL:
  . Fixed bug #65328 (Segfault when getting SplStack object Value). (Laruence)

- PDO:
  . Fixed bug #64953 (Postgres prepared statement positional parameter
    casting). (Mike)

- Phar:
  . Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for
    some specific contents). (Stas)

- Pgsql:
  . Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
    (Yasuo)
  . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update()
    /pg_delete()/pg_insert()). (Yasuo)

- Zlib:
  . Fixed bug #65391 (Unable to send vary header user-agent when
    ob_start('ob_gzhandler') is called) (Mike)
2013-09-21 16:06:07 +00:00
taca
4dd9976760 Update php54 to 5.4.18.
15 Aug 2013, PHP 5.4.18

- Core:
  . Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was
    erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey
    avp200681 gmail com).
  . Fixed bug #65254 (Exception not catchable when exception thrown in autoload
    with a namespace). (Laruence)
  . Fixed bug #65108 (is_callable() triggers Fatal Error).
    (David Soria Parra, Laruence)
  . Fixed bug #65088 (Generated configure script is malformed on OpenBSD).
    (Adam)
  . Fixed bug #62964 (Possible XSS on "Registered stream filters" info).
    (david at nnucomputerwhiz dot com)
  . Fixed bug #62672 (Error on serialize of ArrayObject). (Lior Kaplan)
  . Fixed bug #62475 (variant_* functions causes crash when null given as an
    argument). (Felipe)
  . Fixed bug #60732 (php_error_docref links to invalid pages). (Jakub Vrana)
  . Fixed bug #65226 (chroot() does not get enabled). (Anatol)

- CGI:
  . Fixed Bug #65143 (Missing php-cgi man page). (Remi)

- CLI server:
  . Fixed bug #65066 (Cli server not responsive when responding with 422 http
    status code). (Adam)

- CURL:
  . Fixed bug #62665 (curl.cainfo doesn't appear in php.ini). (Lior Kaplan)

- FPM:
  . Fixed bug #63983 (enabling FPM borks compile on FreeBSD).
    (chibisuke at web dot de, Felipe)

- FTP:
  . Fixed bug #65228 (FTPs memory leak with SSL).
    (marco dot beierer at mbsecurity dot ch)

- GMP:
  . Fixed bug #65227 (Memory leak in gmp_cmp second parameter). (Felipe)

- Imap:
  . Fixed bug #64467 (Segmentation fault after imap_reopen failure).
    (askalski at gmail dot com)

- Intl:
  . Fixed bug #62759 (Buggy grapheme_substr() on edge case). (Stas)
  . Fixed bug #61860 (Offsets may be wrong for grapheme_stri* functions).
    (Stas)

- mysqlnd:
  . Fixed segfault in mysqlnd when doing long prepare. (Andrey)

- ODBC:
  . Fixed bug #61387 (NULL valued anonymous column causes segfault in
    odbc_fetch_array). (Brandon Kirsch)

- Openssl:
  . Fixed handling null bytes in subjectAltName (CVE-2013-4073).
    (Christian Heimes)

- PDO:
  . Allowed PDO_OCI to compile with Oracle Database 12c client libraries.
    (Chris Jones)

- PDO_dblib:
  . Fixed bug #65219 (PDO/dblib not working anymore ("use dbName" not sent)).
    (Stanley Sufficool)

- PDO_pgsql:
  . Fixed meta data retrieve when OID is larger than 2^31. (Yasuo)

- Phar:
  . Fixed Bug #65142 (Missing phar man page). (Remi)

- Session
  . Fixed bug #62535 ($_SESSION[$key]["cancel_upload"] doesn't work as
    documented). (Arpad)
  . Fixed bug #35703 (when session_name("123") consist only digits,
    should warning). (Yasuo)
  . Fixed bug #49175 (mod_files.sh does not support hash bits). Patch by
    oorza2k5 at gmail dot com (Yasuo)

- Sockets:
  . Implemented FR #63472 (Setting SO_BINDTODEVICE with socket_set_option).
    (Damjan Cvetko)

- SPL:
  . Fixed bug #65136 (RecursiveDirectoryIterator segfault). (Laruence)
  . Fixed bug #61828 (Memleak when calling Directory(Recursive)Iterator
    /Spl(Temp)FileObject ctor twice). (Laruence)
  . Fixed bug #60560 (SplFixedArray un-/serialize, getSize(), count() return 0,
    keys are strings). (Adam)

- XML:
  . Fixed bug #65236 (heap corruption in xml parser, CVE-2013-4113). (Rob)
2013-08-16 15:28:23 +00:00
taca
41c232d983 Since openssl's security problem has assigned CVE-2013-4248, update comment
in the patch file.
2013-08-16 00:38:13 +00:00
taca
1d45c6e860 Add fix fo openssl, CVE-2013-4073.
Bump PKGREVISION.
2013-08-14 15:42:56 +00:00
taca
d9edbdde3e Add fix for CVE-2013-4113 as php 5.3.27. (It will be fixed in next PHP 5.4
release.)

Bump PKGREVISION.
2013-07-29 16:22:38 +00:00
taca
b45cc045d6 Correct condition for NetBSD 6.0 and later to fix build problem on NetBSD
6.0.  Reported by J«Órn Clausen as PR pkg/48029.
2013-07-08 13:16:21 +00:00
taca
8d968a6144 Update php54 to 5.4.17.
04 Jul 2013, PHP 5.4.17

- Core:
  . Fixed bug #64988 (Class loading order affects E_STRICT warning). (Laruence)
  . Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC). (Laruence)
  . Fixed bug #64960 (Segfault in gc_zval_possible_root). (Laruence)
  . Fixed bug #64936 (doc comments picked up from previous scanner run). (Stas,
    Jonathan Oddy)
  . Fixed bug #64934 (Apache2 TS crash with get_browser()). (Anatol)
  . Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace). (Michael M Slusarz)

- DateTime:
  . Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    (Gustavo, Derick, Anatol)

- FPM:
  . Fixed Bug #64915 (error_log ignored when daemonize=0). (Remi)
  . Implemented FR #64764 (add support for FPM init.d script). (Lior Kaplan)

- PDO:
  . Fixed bug #63176 (Segmentation fault when instantiate 2 persistent PDO to
    the same db server). (Laruence)

- PDO_DBlib:
  . Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    (Stanley Sufficool)
  . Fixed bug #64338 (pdo_dblib can't connect to Azure SQL). (Stanley
    Sufficool)
  . Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not executed
    statement crashes). (Stanley Sufficool)

- PDO_firebird:
  . Fixed bug #64037 (Firebird return wrong value for numeric field).
    (Matheus Degiovani, Matteo)
  . Fixed bug #62024 (Cannot insert second row with null using parametrized
    query). (patch by james@kenjim.com, Matheus Degiovani, Matteo)

- PDO_mysql:
  . Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR). (Antony, Daniel Beardsley)

- PDO_pgsql:
  . Fixed Bug #64949 (Buffer overflow in _pdo_pgsql_error). (Remi)

- pgsql:
  . Fixed bug #64609 (pg_convert enum type support). (Matteo)

- Readline:
  . Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion). (Hartmel)

- SPL:
  . Fixed bug #64997 (Segfault while using RecursiveIteratorIterator on
    64-bits systems). (Laruence)
2013-07-07 13:37:53 +00:00
taca
f89f1e88c6 Update php54 to 5.4.15 (PHP 5.4.15).
09 May 2013, PHP 5.4.15
- Core:
  . Fixed bug #64578 (debug_backtrace in set_error_handler corrupts zend heap:
    segfault). (Laruence)
  . Fixed bug #64458 (dns_get_record result with string of length -1). (Stas)
  . Fixed bug #64433 (follow_location parameter of context is ignored for most
    response codes). (Sergey Akbarov)
  . Fixed bugs #47675 and #64577 (fd leak on Solaris)

- Fileinfo:
  . Upgraded libmagic to 5.14. (Anatol)

- Zip:
  . Fixed bug #64342 (ZipArchive::addFile() has to check for file existence).
    (Anatol)

- Streams:
  . Fixed Windows x64 version of stream_socket_pair() and improved error
    handling (Anatol Belski)
2013-05-16 16:19:58 +00:00
imil
7b9b365729 Uncomment the pid parameter of php-fpm.conf so the pidfile is created and
rc.d script can really start / stop php-fpm. Bump PKGREVISION.
2013-02-28 21:43:04 +00:00
taca
59f0126bc1 Update php54 to 5.4.12.
PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
21 Feb 2012, PHP 5.4.12

- Core:
  . Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes)
  . Fixed bug #64011 (get_html_translation_table() output incomplete with
    HTML_ENTITIES and ISO-8859-1). (Gustavo)
  . Fixed bug #63982 (isset() inconsistently produces a fatal error on
    protected property). (Stas)
  . Fixed bug #63943 (Bad warning text from strpos() on empty needle).
    (Laruence)
  . Fixed bug #63899 (Use after scope error in zend_compile). (Laruence)
  . Fixed bug #63893 (Poor efficiency of strtr() using array with keys of very
    different length). (Gustavo)
  . Fixed bug #63882 (zend_std_compare_objects crash on recursion). (Dmitry)
  . Fixed bug #63462 (Magic methods called twice for unset protected
    properties). (Stas)
  . Fixed bug #62524 (fopen follows redirects for non-3xx statuses).
    (Wes Mason)
  . Support BITMAPV5HEADER in getimagesize(). (AsamK, Lars)

- Date:
  . Fixed bug #63699 (Performance improvements for various ext/date functions).
    (Lars, original patch by njaguar at gmail dot com)
  . Fixed bug #55397: Comparsion of incomplete DateTime causes SIGSEGV.
    (Derick)

- FPM:
  . Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)

- Litespeed:
  . Fixed bug #63228 (-Werror=format-security error in lsapi code). (George)

- SOAP
  . Added check that soap.wsdl_cache_dir conforms to open_basedir
    (CVE-2013-1635). (Dmitry)
  . Disabled external entities loading (CVE-2013-1643). (Dmitry)

- sqlite3:
  . Fixed bug #63921 (sqlite3::bindvalue and relative PHP functions aren't
    using sqlite3_*_int64 API). (srgoogleguy, Lars)

- PDO_OCI
  . Fixed bug #57702 (Multi-row BLOB fetches). (hswong3i, Laruence)
  . Fixed bug #52958 (Segfault in PDO_OCI on cleanup after running a long
    testsuite). (hswong3i, Lars)

- PDO_sqlite:
  . Fixed bug #63916 (PDO::PARAM_INT casts to 32bit int internally even
    on 64bit builds in pdo_sqlite). (srgoogleguy, Lars)
2013-02-22 03:06:50 +00:00
taca
f06824ef00 Fix build problem of graphics/php-gd with png 1.6.0. 2013-02-17 13:10:13 +00:00
taca
1209bdcefa Update php54 to 5.4.11.
17 Jan 2013, PHP 5.4.11

- Core:
  . Fixed bug #63762 (Sigsegv when Exception::$trace is changed by user).
    (Johannes)
  . Fixed bug #43177 (Errors in eval()'ed code produce status code 500).
    (Todd Ruth, Stas).

- Filter:
  . Fixed bug #63757 (getenv() produces memory leak with CGI SAPI). (Dmitry)
  . Fixed bug #54096 (FILTER_VALIDATE_INT does not accept +0 and -0).
    (martin at divbyzero dot net, Lars)

- JSON:
  . Fixed bug #63737 (json_decode does not properly decode with options
    parameter). (Adam)

- CLI server
  . Update list of common mime types. Added webm, ogv, ogg. (Lars,
    pascalc at gmail dot com)

- cURL extension:
  . Fixed bug (segfault due to libcurl connection caching). (Pierrick)
  . Fixed bug #63859 (Memory leak when reusing curl-handle). (Pierrick)
  . Fixed bug #63795 (CURL >= 7.28.0 no longer support value 1 for
    CURLOPT_SSL_VERIFYHOST). (Pierrick)
  . Fixed bug #63352 (Can't enable hostname validation when using curl stream
    wrappers). (Pierrick)
  . Fixed bug #55438 (Curlwapper is not sending http header randomly).
    (phpnet@lostreality.org, Pierrick)
2013-01-17 15:48:09 +00:00
taca
addf6a9f06 Update php54 package to 5.4.6 (PHP 5.4.6).
PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
16 Aug 2012, PHP 5.4.6

- CLI Server:
  . Implemented FR #62700 (have the console output 'Listening on
    http://localhost:8000'). (pascal.chevrel@free.fr)

- Core:
  . Fixed bug #62661 (Interactive php-cli crashes if include() is used in
    auto_prepend_file). (Laruence)
  . Fixed bug #62653: (unset($array[$float]) causes a crash). (Nikita Popov,
    Laruence)
  . Fixed bug #62565 (Crashes due non-initialized internal properties_table).
    (Felipe)
  . Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php). (Laruence)

- CURL:
  . Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
    (r.hampartsumyan@gmail.com, Laruence)

- DateTime:
  . Fixed Bug #62500 (Segfault in DateInterval class when extended). (Laruence)

- Fileinfo:
  . Fixed bug #61964 (finfo_open with directory causes invalid free).
    (reeze.xia@gmail.com)

- Intl:
  . Fixed bug #62564 (Extending MessageFormatter and adding property causes
    crash). (Felipe)

- MySQLnd:
  . Fixed bug #62594 (segfault in mysqlnd_res_meta::set_mode). (Laruence)

- readline:
  . Fixed bug #62612 (readline extension compilation fails with
    sapi/cli/cli.h: No such file). (Johannes)

- Reflection:
  . Implemented FR #61602 (Allow access to name of constant used as default
    value). (reeze.xia@gmail.com)

- SimpleXML:
  . Implemented FR #55218 Get namespaces from current node. (Lonny)

- SPL:
  . Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault). (Laruence, Gustavo)
  . Fixed bug #61527 (ArrayIterator gives misleading notice on next() when
    moved to the end). (reeze.xia@gmail.com)

- Streams:
  . Fixed bug #62597 (segfault in php_stream_wrapper_log_error with ZTS build).
    (Laruence)

- Zlib:
  . Fixed bug #55544 (ob_gzhandler always conflicts with
    zlib.output_compression). (Laruence)
2012-08-17 15:34:01 +00:00
fhajny
e34891812e Fix a silly bug in latest PHP. Arbitrary symbol cannot be 'sun', which
is taken on all SunOS platforms.
2012-07-31 12:23:12 +00:00
fhajny
7ff447fcfe Fix file descriptor leak on SunOS.
See https://bugs.php.net/bug.php?id=47675
2012-07-25 13:16:01 +00:00
fhajny
36fb10a7cd Add support for readline (for interactive PHP CLI).
Add support for DTrace.
2012-07-25 13:01:05 +00:00
taca
13cc84fd82 Update php54 package to 5.4.5 (PHP 5.4.5).
19-July-2012

o Core
	* Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt)
	* Fixed bug #62432 (ReflectionMethod random corrupt memory on high
	  concurrent)
	* Fixed bug #62373 (serialize() generates wrong reference to the
	  object).
	* Fixed bug #62357 (compile failure: (S) Arguments missing for
	  built-in function __memcmp)
	* Fixed bug #61998 (Using traits with method aliases appears to result
	  in crash during execution)
	* Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value
	  that includes a semi-colon)
	* Fixed potential overflow in _php_stream_scandir (CVE-2012-2688)

o EXIF
	* Fixed information leak in ext exi

o FPM
	* Fixed bug #62205 (php-fpm segfaults (null passed to strstr)
	* Fixed bug #62160 (Add process.priority to set nice(2) priorities)
	* Fixed bug #62153 (when using unix sockets, multiples FPM instances)
	* Fixed bug #62033 (php-fpm exits with status 0 on some failures to
	  start)
	* Fixed bug #61839 (Unable to cross-compile PHP with --enable-fpm)
	* Fixed bug #61835 (php-fpm is not allowed to run as root)
	* Fixed bug #61295 (php-fpm should not fail with commented 'user'
	* Fixed bug #61218 (FPM drops connection while receiving some binary
	  values in FastCGI requests)
	* Fixed bug #61045 (fpm don't send error log to fastcgi clients).
	  (fat) for non-root start)
	* Fixed bug #61026 (FPM pools can listen on the same address).
	  (fat) can be launched without errors)

o Iconv
	* Fixed bug #55042 (Erealloc in iconv.c unsafe)

o Intl
	* Fixed bug #62083 (grapheme_extract() memory leaks)
	* Fixed bug #62081 (IntlDateFormatter constructor leaks memory when
	  called twice)
	* Fixed bug #62070 (Collator::getSortKey() returns garbage)
	* Fixed bug #62017 (datefmt_create with incorrectly encoded timezone
	  leaks pattern)
	* Fixed bug #60785 (memory leak in IntlDateFormatter constructor)
	* ResourceBundle constructor now accepts NULL for the first two arguments

o JSON
	* Fixed bug #61359 (json_encode() calls too many reallocs)

o libxml
	* Fixed bug #62266 (Custom extension segfaults during xmlParseFile
	  with FPM SAPI)

o Phar
	* Fixed bug #62227 (Invalid phar stream path causes crash)

o Readline
	* Fixed bug #62186 (readline fails to compile - void function should
	  not return a value)

o Reflection
	* Fixed bug #62384 (Attempting to invoke a Closure more than once
	  causes segfault)
	* Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory
	  leaks with constant)

o Sockets
	* Fixed bug #62025 (__ss_family was changed on AIX 5.3)

o SPL
	* Fixed bug #62433 (Inconsistent behavior of
	  RecursiveDirectoryIterator to dot files)
	* Fixed bug #62262 (RecursiveArrayIterator does not implement
	  Countable)

o XML Writer
	* Fixed bug #62064 (memory leak in the XML Writer module)

o Zip
	* Upgraded libzip to 0.10.
{
2012-07-20 12:29:05 +00:00
taca
b6cb9f9f85 Adding php54 (PHP 5.4.4) to pkgsrc.
Key new features: traits, a shortened array syntax, a built-in webserver for
testing purposes and more.

A migration guide: http://php.net/migration54
Full changes: http://www.php.net/ChangeLog-5.php
2012-06-16 05:21:55 +00:00