* 水 4月 12 2006 Joe Orton 4.3.9-3.12 - add security fix for new phpinfo XSS (CVE-2006-0996, #187510) * 木 3月 30 2006 Joe Orton 4.3.9-3.11 - add binary safeness fix for php_unescape_html_entities (CVE-2006-1490, #187230) * 水 3月 29 2006 Joe Orton 4.3.9-3.10 - add security fixes from upstream: * XSS issues in "html_errors" mode (CVE-2006-0208, #178028) * mbstring header validation (CVE-2005-3383, #174463) - add bug fix for gd tempfile use (#182719) * 土 11月 05 2005 Joe Orton 4.3.9-3.9 - add security fixes from upstream: * XSS issues in phpinfo() (CVE-2005-3388, #172212) * GLOBALS handling (CVE-2005-3390, #172207) * parse_str() enabling register_globals (CVE-2005-3389, #172209) * exif: infinite recursion on corrupt JPEG (CVE-2005-3353) * 水 8月 17 2005 Joe Orton 4.3.9-3.8 - add security fixes for XML_RPC (Stefan Esser, CAN-2005-2498, #165846) - fix build if TMPDIR is set (#162749) * 木 6月 30 2005 Joe Orton 4.3.9-3.7 - add security fixes: * shtool temp file handling (CAN-2005-1751, #159000) * XML_RPC command injection (Stefan Esser, CAN-2005-1921, #162045) - fix ncurses/gd package descriptions (#158904) * 水 4月 27 2005 Joe Orton 4.3.9-3.6 - add fix for curl safe mode bypasses (#147808) * 木 4月 21 2005 Joe Orton 4.3.9-3.5 - fix unserializer regressions - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221) * 木 4月 14 2005 Joe Orton 4.3.9-3.4 - don't configure with --enable-safe-mode (#148969) - add unserialize() fixes from 4.3.11 - drop Zend double->long conversion change to regain compatibility with upstream * 火 4月 12 2005 Joe Orton 4.3.9-3.3 - add security fixes from upstream: * getimagesize seek() loops (CAN-2005-0524, CAN-2005-0525, #153140) * exif issues (CAN-2005-1042, CAN-2005-1043, #154021, #154025) - adapt oci8 to use Instant Client libraries (Kai Bolay, #149873) - fix mssql build for lib64 platforms (#153108) - fixes to the apache2handler SAPI: * fix virtual() flushing-too-early regression (upstream #31645) * reject PATH_INFO if configured with "AcceptPathInfo off" (upstream #31717) * set response status line correctly in more cases (upstream #31519) * 木 1月 06 2005 Joe Orton 4.3.9-3.2 - add security fixes from Stefan Esser et al (#141136): * unserializer issues (CAN-2004-1019) * overflow in exif image parsing (CAN-2004-1065) * integer overflows in pack, shomp_write (CAN-2004-1018) - add bug fixes: * missing flush before virtual() in sapi/a2h (upstream #30446) * curl POST field handling on 64-bit platforms (upstream #31413) - enable pcntl extension in /usr/bin/php * 木 11月 25 2004 Joe Orton 4.3.9-3.1 - rebuild for new mysql-devel (#140652) - workaround (spurious?) test failure breaking rebuilds (#140676) - add patch for upstream #25570 * 木 10月 21 2004 Joe Orton 4.3.9-3 - fix segfault introduced upstream in CAN-2004-0958 patch * 火 9月 28 2004 Joe Orton 4.3.9-2 - update to 4.3.9 (#133467, Robert Scheck) - use new RTLD_DEEPBIND to load extension modules * 金 9月 10 2004 Joe Orton 4.3.8-11 - don't use --with-regex=system, it's ignored for apache* SAPIs * 土 8月 28 2004 Joe Orton 4.3.8-10 - do apply the Zend double->long conversion fix - run make test in %check and fail build on test failure * 土 8月 28 2004 Joe Orton 4.3.8-9 - require recent 'file' package (#131054, Robert Scheck) - fix Zend double->long conversion * 金 8月 27 2004 Joe Orton 4.3.8-8 - fix -select patch bug which broke stream_select on s390 - add an FD_SETSIZE check to php_sock_stream_wait_for_data * 金 8月 27 2004 Joe Orton 4.3.8-7 - make openssl extension built-in again (#130953) - disable bug16069 test * 金 8月 20 2004 Joe Orton 4.3.8-6 - fix phpize for libdir=lib64 - "fix" round() fudging for recent gcc on x86 - drop unnecessary gd-devel build dependency again - use RTLD_GLOBAL to load extensions again (#127518) * 金 8月 20 2004 Joe Orton 4.3.8-5 - add fix for bundled libgd symbol conflicts (#124530) - enable mime_magic extension and Require: file (#130276) - disable bug22414 test again (#130317) - fix gettimeofday tests on x86_64 * 木 8月 05 2004 Florian La Roche - rebuild * 木 7月 15 2004 Joe Orton 4.3.8-3 - update to 4.3.8 - catch some fd > FD_SETSIZE vs select() issues (#125258) * 火 6月 22 2004 Joe Orton 4.3.7-4 - pick up test failures again - have -devel require php of same release * 金 6月 18 2004 Joe Orton 4.3.7-3 - add gmp_powm fix (Oskari Saarenmaa, #124318) - split mbstring, ncurses, gd, openssl extns into subpackages - fix memory leak in apache2handler; use ap_r{write,flush} rather than brigade interfaces * 水 6月 16 2004 Elliot Lee - rebuilt * 金 6月 04 2004 Joe Orton 4.3.7-1 - update to 4.3.7 - have -pear subpackage require php of same VR * 木 5月 27 2004 Joe Orton 4.3.6-6 - buildrequire smtpdaemon (#124430) - try switching to system libgd again (prevent symbol conflicts when e.g. mod_perl loads the system libgd library.) * 木 5月 20 2004 Joe Orton 4.3.6-5 - don't obsolete php-imap (#123580) - unconditionally build -imap subpackage * 金 5月 14 2004 Joe Orton 4.3.6-4 - remove trigger * 金 4月 23 2004 Joe Orton 4.3.6-3 - fix umask reset "feature" (#121454) - don't use DL_GLOBAL when dlopen'ing extension modules * 月 4月 19 2004 Joe Orton 4.3.6-2 - fix segfault on httpd SIGHUP (upstream #27810) * 土 4月 17 2004 Joe Orton 4.3.6-1 - update to 4.3.6 (Robert Scheck, #121011) * 木 4月 08 2004 Joe Orton 4.3.4-11 - add back imap subpackage, using libc-client (#115535) * 水 3月 03 2004 Elliot Lee - rebuilt * 木 2月 19 2004 Joe Orton 4.3.4-10 - eliminate /usr/local/lib RPATH in odbc.so - really use system pcre library * 土 2月 14 2004 Elliot Lee 4.3.4-9 - rebuilt * 火 2月 03 2004 Bill Nottingham 4.3.4-8 - obsolete php-imap if we're not building it * 木 1月 29 2004 Joe Orton 4.3.4-7 - gd fix for build with recent Freetype2 (from upstream) - remove easter egg (Oden Eriksson, Mandrake) * 木 1月 22 2004 Joe Orton 4.3.4-6 - php-pear requires php - also remove extension=imap from php.ini in upgrade trigger - merge from Taroon: allow upgrade from Stronghold 4.0 * 木 1月 22 2004 Joe Orton 4.3.4-5 - add defattr for php-pear subpackage - restore defaults: output_buffering=Off, register_argc_argv=On - add trigger to handle php.ini upgrades smoothly (#112470) * 水 1月 14 2004 Joe Orton 4.3.4-4 - conditionalize support for imap extension for the time being - switch /etc/php.ini to use php.ini-recommended (but leave variables_order as EGPCS) (#97765) - set session.path to /var/lib/php/session by default (#89975) - own /var/lib/php{,/session} and have apache own the latter - split off php-pear subpackage (#83771) * 日 12月 14 2003 Jeff Johnson 4.3.4-3 - rebuild against db-4.2.52. * 火 12月 02 2003 Joe Orton 4.3.4-2 - rebuild for new libxslt (#110658) - use --with-{mssql,oci8} for enabling extensions (#110482) - fix rebuild issues (Jan Visser, #110274) - remove hard-coded LIBS - conditional support for mhash (Aleksander Adamowski, #111251) * 火 11月 11 2003 Joe Orton 4.3.4-1.1 - rebuild for FC1 updates * 火 11月 11 2003 Joe Orton 4.3.4-1 - update to 4.3.4 - include all licence files - libxmlrpc fixes * 火 10月 21 2003 Joe Orton 4.3.3-6 - use bundled libgd (#107407) - remove manual: up-to-date manual sources are no longer DFSG-free; it's too big; it's on the web anyway; #91292, #105804, #107384 * 木 10月 16 2003 Joe Orton 4.3.3-5 - add php-xmlrpc subpackage (#107138) * 火 10月 14 2003 Joe Orton 4.3.3-4 - drop recode support, symbols collide with MySQL * 月 10月 13 2003 Joe Orton 4.3.3-3 - split domxml extension into php-domxml subpackage - enable xslt and xml support in domxml extension (#106042) - fix httpd-devel build requirement (#104341) - enable recode extension (#106755) - add workaround for #103982 * 金 9月 26 2003 Jeff Johnson 4.3.3-3 - rebuild against db-4.2.42. * 月 9月 08 2003 Joe Orton 4.3.3-2 - don't use --enable-versioning, it depends on libtool being broken (#103690) * 月 9月 08 2003 Joe Orton 4.3.3-1 - update to 4.3.3 - add libtool build prereq (#103388) - switch to apache2handler * 火 7月 29 2003 Joe Orton 4.3.2-8 - rebuild * 水 7月 23 2003 Nalin Dahyabhai 4.3.2-7 - rebuild * 水 7月 09 2003 Joe Orton 4.3.2-6 - use system pcre library * 火 6月 10 2003 Joe Orton 4.3.2-5 - enable mbstring and mbregex (#81336) - fix use of libtool 1.5 * 木 6月 05 2003 Elliot Lee - rebuilt * 水 6月 04 2003 Joe Orton 4.3.2-3 - add lib64 and domxml fixes * 水 6月 04 2003 Frank Dauer - added conditional support for mssql module (#92149) * 土 5月 31 2003 Joe Orton 4.3.2-2 - update the -tests and -lib64 patches - fixes for db4 detection - require aspell-devel >= 0.50.0 for pspell compatibility * 金 5月 30 2003 Joe Orton 4.3.2-1 - update to 4.3.2 * 土 5月 17 2003 Joe Orton 4.3.1-3 - link odbc module correctly - patch so that php -n doesn't scan inidir - run tests using php -n, avoid loading system modules * 木 5月 15 2003 Joe Orton 4.3.1-2 - workaround broken parser produced by bison-1.875 * 水 5月 07 2003 Joe Orton 4.3.1-1 - update to 4.3.1; run test suite - open extension modules with RTLD_NOW rather than _LAZY * 水 5月 07 2003 Joe Orton 4.2.2-19 - patch for gd 2.x API changes in gd extension * 金 5月 02 2003 Joe Orton 4.2.2-18 - rebuild to use aspell (#89925) - patch to work round conditional AC_PROG_CXX break in autoconf 2.57 - fix dba build against db >= 4.1 * 火 2月 25 2003 Joe Orton 4.2.2-17 - restrict SNMP patch to minimal changes, fixing segv on startup (#84607) * 木 2月 13 2003 Joe Orton 4.2.2-16 - prevent startup if using httpd.worker to avoid thread-safety issues. - fix parsing private keys in OpenSSL extension (#83994) - fixes for SNMP extension (backport from 4.3) (#74761) * 木 1月 30 2003 Joe Orton 4.2.2-15 - add security fixes for wordwrap() and mail() * 火 1月 14 2003 Joe Orton 4.2.2-14 - drop explicit Requires in subpackages, rely on automatic deps. - further fixes for libdir=lib64 * 水 12月 18 2002 Joe Orton 4.2.2-13 - drop prereq for perl, grep in subpackages - rebuild and patch for OpenSSL 0.9.7 * 水 12月 11 2002 Joe Orton 4.2.2-12 - backport "ini dir scanning" patch from CVS HEAD; /etc/php.d/*.ini are now loaded at startup; each subpackage places an ini file in that directory rather than munging /etc/php.ini in post/postun. - default config changes: enable short_open_tag; remove settings for php-dbg extension * 木 12月 05 2002 Joe Orton 4.2.2-11 - own the /usr/lib/php4 directory (#73894) - reinstate dropped patch to unconditionally disable ZTS * 火 12月 03 2002 Joe Orton 4.2.2-10 - remove ldconfig invocation in post/postun - fixes for #73516 (partially), #78586, #75029, #75712, #75878 * 木 11月 07 2002 Joe Orton 4.2.2-9 - fixes for libdir=/usr/lib64, based on SuSE's patches. - add build prereqs for zlib-devel, imap-devel, curl-devel (#74819) - remove unpackaged files from install root - libtoolize; use configure cache to speed up build * 火 9月 24 2002 Philip Copeland 4.2.2-8.0.6 - PHP cannot determine which UID is being used, so safe mode restrictions were always applied. Fixed. (#74396) * 水 9月 04 2002 Philip Copeland 4.2.2-8.0.4 - zts support seems to crash out httpd on a *second* sighup ie service httpd start; apachectl restart ; (ok) apachectl restart ; (httpd segv's and collapses) removed --enable-experimental-zts which this seems related to. - Small patch added because some places need to know that they aren't using the ZTS API's (dumb) * 火 9月 03 2002 Philip Copeland 4.2.2-8.0.3 - fixup /etc/httpd/conf.d/php.conf to limit largest amount of data accepted (#73254) Limited to 512K (which seems a little excessive but anyway,..) Note: php.conf is part of the srpm sources not part of the php codebase. - ditched extrenious --enable-debugger (was for php-dbg) - When upgrading we tend not to modify /etc/php.ini if it exists, instead we create php.ini.rpmnew. Modified the post scripts to edit php.ini.rpmnew if it exists, so that people can copy over the php.ini.rpmnew as php.ini knowing that it will be an edited version, consistant with what modules they installed #72033 * 月 9月 02 2002 Joe Orton 4.2.2-8.0.2 - require httpd-mmn for module ABI compatibility * 土 8月 31 2002 Philip Copeland 4.2.2-8.0.1 - URLS would drop the last arguments #72752 --enable-mbstring --enable-mbstr-enc-trans These were supposed to help provide multibyte language support, however, they cause problems. Removed. Maybe in a later errata when they work. - added small patch to php_variables.c that allows $_GET[] to initialise properly when --enable-mbstr-enc-trans is disabled. - Be consistant with errata naming (8.0.x) * 水 8月 28 2002 Nalin Dahyabhai 4.2.2-11 - rebuild * 金 8月 23 2002 Philip Copeland 4.2.2-10 - Beat down the requirement list to something a little more sane * 木 8月 15 2002 Bill Nottingham 4.2.2-9 - trim manual language lists * 火 8月 13 2002 Gary Benson 4.2.2-8 - rebuild against httpd-2.0.40 * 日 8月 11 2002 Elliot Lee 4.2.2-7 - rebuilt with gcc-3.2 (we hope) * 木 8月 08 2002 Philip Copeland 4.2.2-6 - Where multiple cookies are set, only the last one was actually made. Fixes #67853 * 火 8月 06 2002 Philip Copeland 4.2.2-5 - Shuffled the php/php-devel package file manifest with respect to PEAR (PHP Extension and Application Repository) #70673 * 土 8月 03 2002 Philip Copeland 4.2.2-4 - #67815, search path doesn't include the pear directory - pear not being installed correctly. Added --with-pear= option. * 水 7月 24 2002 Tim Powers 4.2.2-2 - build using gcc-3.2-0.1 * 火 7月 23 2002 Philip Copeland 4.2.2-1 - Yippie 8/ another security vunerability (see http://www.php.net/release_4_2_2.php for details) * 木 7月 18 2002 Philip Copeland 4.2.1-9 - Reminder to self that mm was pushed out because it's NOT thread safe. - Updated the manuals (much to Bills horror) * 水 7月 17 2002 Philip Copeland 4.2.1-8 - php.ini alteration to fit in with the install/uninstall of various php rpm based installable modules * 火 7月 16 2002 Philip Copeland 4.2.1-8 - php -v showing signs of deep unhappiness with the world added --enable-experimental-zts to configure to make it happy again (yes I know experimental sounds 'dangerous' it's just a name for an option we need) * 土 7月 13 2002 Philip Copeland 4.2.1-7 - #68715, Wrong name for Mysql Module in php.ini. Fixed. * 土 6月 29 2002 Philip Copeland 4.2.1-6 - SNMP fixup * 金 6月 28 2002 Philip Copeland 4.2.1-5 - Ah,.. seems httpd2 has been renamed to just plain ol' httpd. Fixed spec file to suit. - ucd-snmp changed to net-snmp overnight... temporarily disabled snmp while I work out the impact of this change and if it is safe * 木 6月 27 2002 Philip Copeland 4.2.1-4 - openldap 2.1.x problem solved by Nalin. Sure the ldap API didn't change,... . Added TSRMLS_FETCH() to ldap_rebind_proc(). - Removed the php-dbg package as thats going to be provided elsewhere * 土 6月 22 2002 Tim Powers 4.2.1-3 - automated rebuild * 火 6月 11 2002 Philip Copeland 4.2.1-2 - Actually mm is now a dead project. Removed permently. * 水 5月 29 2002 Gary Benson 4.2.1-2 - change paths for httpd-2.0 - add the config file - disable mm temporarily * 月 5月 27 2002 Tim Powers 4.2.1-1 - automated rebuild * 木 5月 23 2002 Philip Copeland 4.2.1-0 - Initial pristine build of php-4.2.1 - Minor patch to get around a 64 bitism - Added in the dgb debugging hooks