diff options
| author | adrianp <adrianp@pkgsrc.org> | 2007-05-16 12:19:08 +0000 |
|---|---|---|
| committer | adrianp <adrianp@pkgsrc.org> | 2007-05-16 12:19:08 +0000 |
| commit | 5e121d5528eef97150ba560b62f325bc40966f79 (patch) | |
| tree | 97a495076b2f2e88566428994c1b49d4943f140b /chat | |
| parent | c29e5b0e6ddae96e18a2bd297f6a48b17020a464 (diff) | |
| download | pkgsrc-5e121d5528eef97150ba560b62f325bc40966f79.tar.gz | |
Update to 1.5.4
1.5.4
MAJOR SECURITY BUGFIX RELEASE
arbitrary file execution
see http://pear.php.net/news/vulnerability2.php
* Fix Bug #10865: using --packagingroot regression [tias/cellog]
* Fix Bug #10873: pear channel-discover broken - pear temp directories not writeable [cellog]
1.5.3
* Fix Bug #10311: use clearContents to delete bundledPackages [cellog]
* Fix Bug #10602: notice on line 157 PEAR/REST/11.php [cellog]
* Fix Bug #10620: use \z instead of $ in regexes [cellog]
* Fix Bug #10621: channel-info does not handle mirrors properly [cellog]
* Fix Bug #10645: Patch for verbose sign command [cweiske]
* Fix Bug #10647: no mktempdir but config temp_dir in Channels.php [tias]
* Fix Bug #10656: no userConfirm() check in Frontend::setFrontendObject [tias]
* Fix Bug #10661: Failure to install local package [cellog]
* Fix Bug #10676: tmpdir() search variables in wrong order. [cellog]
* Fix Bug #10690: RunTest.php parses HTTP headers for non-CGI tests [jstump]
* Fix Bug #10720: Notice: Undefined variable: group in PEAR/Downloader/Package.php on line 698 [cellog]
* Fix Bug #10733: Validator cannot handle invalid package2.xml file [cellog]
* Fix Bug #10768: if a package is not installed, upgrade will not install it [cellog]
* Fix Bug #10771: upgrade-all/upgrade will not upgrade non-PEAR channels [cellog]
Diffstat (limited to 'chat')
0 files changed, 0 insertions, 0 deletions