[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q2 2008-01-18T05:06:18Z 2008-01-18T05:06:18Z tnn tnn 2008-01-18T05:06:18Z urn:sha1:1c8e24b168b5909ecc586bdbb660570b490d92ef on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@ 2008-01-04T10:07:52Z adrianp adrianp 2008-01-04T10:07:52Z urn:sha1:1ed7596ea61bab8d84dae6937b055c1ee3cb09ca Improved fix for MOPB-02-2007. Fixed an integer overflow inside chunk_split(). Identified by Gerhard Wagner. Fixed integer overlow in str[c]spn(). Fixed regression in glob when open_basedir is on introduced by 41655 fix. Fixed money_format() not to accept multiple %i or %n tokens. Addded "max_input_nesting_level" php.ini option to limit nesting level of input variables. Fix for MOPB-03-2007. Fixed INFILE LOCAL option handling with MySQL - now not allowed when open_basedir or safe_mode is active. Fixed session.save_path and error_log values to be checked against open_basedir and safe_mode (CVE-2007-3378). Fixed bug 43010 (Fixed regression in imagearc with two equivelent angles). Fixed bug 41765 (Recode crashes/does not work on amd64). Fixed bug 41630 (segfault when an invalid color index is present in the image data). Fixed bug 41628 (PHP settings leak between Virtual Hosts in Apache 1.3). Fixed bug 38798 (OpenSSL init corrected in php5 but not in php4). 2007-12-09T14:40:08Z jdolecek jdolecek 2007-12-09T14:40:08Z urn:sha1:8e2fcdf082b2b3f0941ec59cc4dda7007d0ac40a fixes problem reported by reinhold ropper for php-gd 2007-09-07T22:12:10Z jlam jlam 2007-09-07T22:12:10Z urn:sha1:2f517bc25c1dfd477877da169af65a161a689211 and to support the "inet6" option instead. Remaining usage of USE_INET6 was solely for the benefit of the scripts that generate the README.html files. Replace: BUILD_DEFS+= USE_INET6 with BUILD_DEFS+= IPV6_READY and teach the README-generation tools to look for that instead. This nukes USE_INET6 from pkgsrc proper. We leave a tiny bit of code to continue to support USE_INET6 for pkgsrc-wip until it has been nuked from there as well. 2007-08-01T01:40:54Z taca taca 2007-08-01T01:40:54Z urn:sha1:1e37186cd33c8c3b0f8bffe7ba9121e8bc1848ec Bump PKGREVISION. 2007-06-11T15:24:43Z heinz heinz 2007-06-11T15:24:43Z urn:sha1:886d58d9cf45729765f9924c29e8ae9f9ecbbf9a 2007-05-06T19:50:18Z adrianp adrianp 2007-05-06T19:50:18Z urn:sha1:24c898ff273ec835c18fcfbf29d93e1f5440456f * Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) * Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) * Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) * Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) * Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) * Added missing open_basedir & safe_mode checks to zip:// and bzip:// wrappers. (MOPB-21 by Stefan Esser). * Limit nesting level of input variables with max_input_nesting_level as fix for (MOPB-03 by Stefan Esser) * Fixed CRLF injection inside ftp_putcmd(). (by loveshell[at]Bug.Center.Team) * Fixed a possible super-global overwrite inside import_request_variables(). (by Stefano Di Paola, Stefan Esser) * Fixed a remotely trigger-able buffer overflow inside bundled libxmlrpc library. (by Stanislav Malyshev) * XSS in phpinfo() (MOPB-8 by Stefan Esser) 2007-05-06T13:08:33Z tron tron 2007-05-06T13:08:33Z urn:sha1:e95c9c04e4d9aa0f4861225fb62fd8dfdac3b8c4 Bump package revision. 2007-05-05T21:35:05Z adrianp adrianp 2007-05-05T21:35:05Z urn:sha1:5b814aa273e67f2e34ac2afb14b189fc309433dc 2007-03-11T16:43:49Z grant grant 2007-03-11T16:43:49Z urn:sha1:6330aa71bbc51cf480ff378487a758bf2dbe3be4 libraries. no PKGREVISION bump as the module is not built by default. needed for upcoming new php-oracle package.