Age | Commit message (Collapse) | Author | Files | Lines |
|
-----------------------------------------
GNU Radio releases 3.7.6 and 3.7.5.2 are available for download:
( several tens of lines omitted for URL and List of contributors)
Release 3.7.5.2 is a bug-fix only maintenance patch following 3.7.5.1,
and will be the last one for the 3.7.5 release. Release 3.7.6
incorporates all these fixes and adds significant new features.
|
|
|
|
- Convert (buildlink3) from fltk 1.3 to 2.0
(upstream)
- Update 0.3.9 to 0.4.4
---------------------
flpsed-0.4.4
- fix problem with documents that embed standard font replacements
(reported by Volker Kuhlmann)
- use plain Helvetica font instead of HelveticaNeue-Roman
(reported by Evgeny Stambulchik and others).
- use ftell() instead of ftello() for better compatibility
(reported by Christophe CURIS).
- fix compile problem with recent fltk-2 snapshots (reported by Brian)
- automatically import PDF files from the command line (requested by many).
flpsed-0.4.3
- implicitely end setup section if %%Page comment is encountered and check
for valid setup length after DSC parsing.
- only set modified flag if real changes have been made to the document.
- use fl_choice() instead of deprecated fl_ask().
- no longer rely on %%Pages comment because of possible use of (atend).
- call XSync() to avoid "Cannot get ghostview property" error from gs
(reported by A Mennucc).
- don't die on SIGPIPE if gs has a problem (reported by A Mennucc).
- use fltk2-config instead of fltk-config.
flpsed-0.4.2
- Use setenv() instead of putenv() for POSIX
compatibility (noticed by Jeff Orczykowski on Solaris 8).
- fix gcc-4.1 compilation problem.
- fix segfault in DSC code reported by Morten Brix Pedersen.
- work around missing utf8len() in recent fltk-2. versions.
- more compile fixes for recent fltk-2. versions.
flpsed-0.4.1
- Add support for PostScript Document Structure Convention.
- Pages can now be accessed in random order.
- Document sizes other than A4 are handled better.
- Add -geometry and -z (zoom) options.
flpsed-0.4.0
- Switch to fltk2 to support antialiased fonts and utf8.
- Added support for polish special characters (tested by Bartosz Malinowski).
- Document sizes other than A4 are handled better.
- Add -geometry and -z (zoom) options.
|
|
|
|
Upstream changes:
0.004001 2015-01-12 16:56:22-05:00 America/New_York
- Removed Log::Any::Adapter dependency issue #9
0.004000 2015-01-07 10:27:26-05:00 America/New_York
- Changed PERL require modules to perl
0.003001 2014-12-08 14:24:38-05:00 America/New_York
- Add version info to log.pm
- Add tests to check for version
|
|
|
|
Upstream changes:
0.004 2014-11-25
- improve Makefile.PL for better distribution kwalitee
- add README.md
|
|
|
|
Upstream changes:
0.005 2014-12-01
- Update Makefile.PL for up-to-date resources and requirements spec
- consolidate Synopsis in main pod
- move from README to README.md
- improve author tests before releasing
0.004 2014-10-28
- add ability for options to importer of MooX::ConfigFromFile
- add option to have a singleton config (loaded once).
- improve documentation
- harmonize tests
|
|
|
|
Upstream changes:
0.011 2014-12-03
- apply clean Perl::Tidy rules to avoid mixed spaces/tabs and other
settings
- add version number to MooX::Cmd::Tester
- allow overriding protected constructor when renaming public one
0.010 2014-12-02
- switch distribution tooling from Dist::Zilla to ExtUtils::MakeMaker
- Added Changes file with content based on git log according to
CPAN::Changes::Spec (Neil Bowers)
- Apply typo fixes for documentation from David Steinbrunner
- Sven Schober provided heavily improved description
|
|
|
|
Upstream changes:
0.04 2014-02-25
Minor changes to avoid deprecation warnings in 5.12+
|
|
|
|
Upstream changes:
0.106 2014-03-10 08:08:39-04:00 America/New_York
- avoid dumb v-string warning in dumb perl versions (thanks, Graham
Knop, you're not dumb!)
|
|
|
|
Upstream changes:
1.007000 - 2015-01-21
- fix Moose metaclass inflation of Method::Generate::Constructor (RT#101111)
- clarify behavior of clearers for non-lazy attribute defaults
- add Sub::Defer::undefer_package to undefer all subs from a given package
- existing attributes will no longer be overwritten when composing roles.
Previously, the attribute configuration used by the constructor would be
overridden, but the attribute methods would not be. This caused a mismatch
in attribute behavior.
- link to Type::Tiny in docs rather than MooX::Types::MooseLike
- document exports of Sub::Defer
- fix capture_unroll usage in inlinify example
- fix needless re-assigning of variables in generated Sub::Quote subs
- fix global destruction test to work when perl path has spaces
|
|
|
|
Update DEPENDS
Upstream changes:
0.025 2014-11-16 14:29:37-05:00 America/New_York
- run preprocess_line before can_ignore
- bump up required Mixin::Linewise to help out Win32 users
0.024 2014-04-05 21:31:54-04:00 America/New_York
- MIGHT BREAK YOUR CODE (but probably won't):
handle_unparsed_line now receives its arguments in reversed order
- new methods exist and more methods now receive the filehandle to make
subclassing more flexible
0.023 2014-03-13 10:21:15+01:00 Europe/Paris
- specify minimum Mixin::Linewise requirement (thanks, Andreas Koenig
and Smylers)
0.022 2014-01-30 16:57:43-05:00 America/New_York
- remove the last few places IO::String was used (thanks, Graham Knop)
0.021 2013-10-20 11:33:59 America/New_York
- throw an exception if line 1 appears to start with a UTF-8 BOM
- typo fixes in docs (thanks, David Steinbrunner!)
|
|
- Add DEPENDS+= textproc/hevea
- Remove two patches:
* One was to disable building doc
* The other was fixing tex stuff PATH
- PKGREVISION++
- (PLIST) adding many doc files
|
|
|
|
Upstream changes:
5.73 2015-01-24
- Deprecated Mojolicious::Routes::Route::bridge in favor of
Mojolicious::Routes::Route::under.
- Deprecated Mojolicious::Controller::render_exception in favor of
reply->exception helper.
- Deprecated Mojolicious::Controller::render_not_found in favor of
reply->not_found helper.
- Removed deprecated object-oriented Mojo::JSON API.
- Removed deprecated stringification support from Mojo::Collection.
- Removed deprecated support for data arguments from Mojo::JSON::Pointer.
- Removed deprecated AUTOLOAD and pluck methods from Mojo::Collection.
- Removed deprecated AUTOLOAD and val methods from Mojo::DOM.
- Moved tutorial from Mojolicious::Lite to Mojolicious::Guides::Tutorial.
- Added term_escape method to Mojo::ByteStream.
- Added term_escape function to Mojo::Util.
- Improved get command to use the user agent of the application.
- Improved diagnostics information for MOJO_DAEMON_DEBUG,
MOJO_USERAGENT_DEBUG and MOJO_WEBSOCKET_DEBUG environment variables.
- Fixed tag helpers to generate correct HTML5. (batman, sri)
- Fixed JSON Pointer escaping bug.
- Fixed portability bug in monkey_patch tests.
|
|
|
|
Upstream changes:
1.74 2015-01-23
========================================
[OTHER CHANGES]
- updated repository link in metadata
|
|
|
|
|
|
- Add comment on patches
- upstream claims problem fixed, but prerequisite
is missing on pkgsrc yet, so still doc is disabled now
(upstream)
- Update to 1.10.2
Version 1.10.2
- Fixed packaging of documentation
|
|
|
|
1.6.4 (2007-10-20)
- For some reason 1.6.3 did not include all the changes it was supposed to
have, this release should fix it. One such issue is the MacOS X
compilation.
- Include some updates to the default chktexrc from Jean-Marc Lasgouttes.
|
|
|
|
openSUSE Security Update: Security update for openssl
______________________________________________________________________________
Announcement ID: openSUSE-SU-2015:0130-1
Rating: important
References: #911399 #912014 #912015 #912018 #912292 #912293
#912294 #912296
Cross-References: CVE-2014-3569 CVE-2014-3570 CVE-2014-3571
CVE-2014-3572 CVE-2014-8275 CVE-2015-0204
CVE-2015-0205 CVE-2015-0206
Affected Products:
openSUSE 13.2
openSUSE 13.1
______________________________________________________________________________
An update that fixes 8 vulnerabilities is now available.
Description:
openssl was updated to 1.0.1k to fix various security issues and bugs.
More information can be found in the openssl advisory:
http://openssl.org/news/secadv_20150108.txt
Following issues were fixed:
* CVE-2014-3570 (bsc#912296): Bignum squaring (BN_sqr) may have produced
incorrect results on some platforms, including x86_64.
* CVE-2014-3571 (bsc#912294): Fixed crash in dtls1_get_record whilst in
the listen state where you get two separate reads performed - one for
the header and one for the body of the handshake record.
* CVE-2014-3572 (bsc#912015): Don't accept a handshake using an ephemeral
ECDH ciphersuites with the server key exchange message omitted.
* CVE-2014-8275 (bsc#912018): Fixed various certificate fingerprint issues.
* CVE-2015-0204 (bsc#912014): Only allow ephemeral RSA keys in export
ciphersuites
* CVE-2015-0205 (bsc#912293): A fixwas added to prevent use of DH client
certificates without sending certificate verify message.
* CVE-2015-0206 (bsc#912292): A memory leak was fixed in
dtls1_buffer_record.
References:
http://support.novell.com/security/cve/CVE-2014-3569.html
http://support.novell.com/security/cve/CVE-2014-3570.html
http://support.novell.com/security/cve/CVE-2014-3571.html
http://support.novell.com/security/cve/CVE-2014-3572.html
http://support.novell.com/security/cve/CVE-2014-8275.html
http://support.novell.com/security/cve/CVE-2015-0204.html
http://support.novell.com/security/cve/CVE-2015-0205.html
http://support.novell.com/security/cve/CVE-2015-0206.html
https://bugzilla.suse.com/show_bug.cgi?id=911399
https://bugzilla.suse.com/show_bug.cgi?id=912014
https://bugzilla.suse.com/show_bug.cgi?id=912015
https://bugzilla.suse.com/show_bug.cgi?id=912018
https://bugzilla.suse.com/show_bug.cgi?id=912292
https://bugzilla.suse.com/show_bug.cgi?id=912293
https://bugzilla.suse.com/show_bug.cgi?id=912294
https://bugzilla.suse.com/show_bug.cgi?id=912296
|
|
|
|
---- Version 7.8.12 - 14/12/16 ----
Fix bad handling of "K:none", especially when transposition.
Fix bad transposition of latin guitar chord "La".
Fix loss of 'exp none' in K:.
Fix some compilation warnings
(reported by John Chambers).
Fix problems with decorations or guitar chords/annotations
in sequence/measure repeat.
(reported by Frédéric Boulanger).
---- Version 7.8.11 - 14/11/26 ----
Fix bad position of grace notes in overlay voices at start of measure
(reported by Jean-Luc Zins).
Fix bad repeat font when staves/voices with different scales
(reported by Gerhard Schacherl).
---- Version 7.8.10 - 14/11/01 ----
Change the PS font scale of the accidentals according to the FontMatrix
(reported by Chuck Boody).
Fix loss of voice options when many %%voice's without "%%voice end" in %%tune.
Fix lost of lyrics when ABC version 2.1 and generation restart.
Fix bad transposition of notes when %%transpose after K:.
Too long to list all the ChangeLog, so
list of the version and date for the rest of ChangeLog
---- Version 7.8.9 - 14/10/14 ----
---- Version 7.8.8 - 14/08/29 ----
---- Version 7.8.7 - 14/08/09 ----
---- Version 7.8.6 - 14/07/17 ----
---- Version 7.8.5 - 14/07/01 ----
---- Version 7.8.4 - 14/06/18 ----
---- Version 7.8.3 - 14/05/23 ----
---- Version 7.8.2 - 14/05/05 ----
---- Version 7.8.1 - 14/04/02 ----
---- Version 7.8.0 - 14/03/26 ----
---- Version 7.7.2 - 14/03/07 ----
---- Version 7.7.1 - 14/02/18 ----
---- Version 7.7.0 - 14/02/17 ----
---- Version 7.6.10 - 14/01/23 ----
---- Version 7.6.9 - 14/01/23 ----
---- Version 7.6.8 - 13/11/21 ----
---- Version 7.6.7 - 13/11/03 ----
---- Version 7.6.6 - 13/11/03 ----
---- Version 7.6.5 - 13/11/02 ----
---- Version 7.6.4 - 13/11/01 ----
---- Version 7.6.3 - 13/10/25 ----
---- Version 7.6.2 - 13/10/18 ----
---- Version 7.6.1 - 13/10/16 ----
---- Version 7.6.0 - 13/08/20 ----
---- Version 7.5.8 - 13/08/07 ----
---- Version 7.5.7 - 13/07/16 ----
---- Version 7.5.6 - 13/06/17 ----
---- Version 7.5.5 - 13/06/06 ----
---- Version 7.5.4 - 13/05/27 ----
---- Version 7.5.3 - 13/05/24 ----
---- Version 7.5.2 - 13/03/22 ----
---- Version 7.5.1 - 13/03/17 ----
---- Version 7.5.0 - 13/03/01 ----
---- Version 7.4.2 - 13/02/13 ----
---- Version 7.4.1 - 13/02/11 ----
---- Version 7.4.0 - 13/01/29 ----
---- Version 7.3.5 - 13/01/15 ----
---- Version 7.3.4 - 13/01/08 ----
---- Version 7.3.3 - 12/12/14 ----
---- Version 7.3.2 - 12/12/07 ----
---- Version 7.3.1 - 12/11/28 ----
---- Version 7.3.0 - 12/11/17 ----
---- Version 7.2.2 - 12/11/07 ----
---- Version 7.2.1 - 12/10/30 ----
---- Version 7.2.0 - 12/10/25 ----
---- Version 7.1.3 - 12/10/18 ----
---- Version 7.1.2 - 12/10/09 ----
---- Version 7.1.1 - 12/09/29 ----
---- Version 7.1.0 - 12/09/13 ----
---- Version 7.0.16 - 12/09/06 ----
---- Version 7.0.15 - 12/08/27 ----
---- Version 7.0.14 - 12/07/22 ----
---- Version 7.0.13 - 12/06/17 ----
---- Version 7.0.12 - 12/06/10 ----
---- Version 7.0.11 - 12/06/02 ----
---- Version 7.0.10 - 12/05/28 ----
---- Version 7.0.9 - 12/05/23 ----
---- Version 7.0.8 - 12/05/21 ----
---- Version 7.0.7 - 12/05/16 ----
---- Version 7.0.6 - 12/05/13 ----
---- Version 7.0.5 - 12/04/30 ----
---- Version 7.0.4 - 12/03/31 ----
---- Version 7.0.3 - 12/03/03 ----
---- Version 7.0.2 - 12/02/21 ----
---- Version 7.0.1 - 12/02/06 ----
---- Version 7.0.0 - 12/02/02 ----
|
|
|
|
Remove patches that have been integrated upstream.
0.8.1:
* Add sqlite and perl as dependencies for RPM/Debian packages (by @fatalbanana)
* Remove whitelist.lua from RPM file list (by @fatalbanana)
* Make Exim pass hostnames to rspamd (by @fatalbanana)
* Fix building on Fedora (by @fatalbanana)
* Add toggle for disabling installation of systemd units on Linux (by @fatalbanana)
* Fix double format rounding that caused output corruption (reported by @fatalbanana)
* Revert broken change for destructors ordering that led to memory corruption
* Do not reset symbols case of settings if parsed from lua (reported by @andrejzverev)
* Fix build on SunOS (by @wiedi)
* Fix multiple crashes on broken DKIM DNS records
* Fix critical issue with composites weights removing
* Fix memory corruption in composites processing code
* Ignore non-SPF TXT records when parsing SPF includes
|
|
Not all platforms have posix_memalign(3) so we need to check if it
exists. This fixes build failure on Darwin 9. See:
https://www.gnu.org/software/gnulib/manual/html_node/posix_005fmemalign.html
|
|
|
|
replaced by contao34 (Contao Open Source CMS 3.4.x).
|
|
|
|
3.4.2.
|
|
Version 3.4.2 (2015-01-22)
--------------------------
### Fixed
Fix an infinite recursion problem in the `FilesModel` class (see #7588).
Version 3.4.1 (2015-01-22)
--------------------------
### Fixed
Fix the position of the input field hints (see #7561).
### Fixed
Do not apply the GDlib maximum dimensions to SVG images (see #7435).
### Fixed
Do not show the diff icon if a record has been deleted (see #7429).
### Fixed
Remove a left-over headline from the `ce_text.xhtml` template (see #7502).
### Fixed
Preserve comments when exporting CSS files (see #7482).
### Fixed
Fix the LESS import path in the Combiner (see #7533).
### Fixed
Hide the width and height attributes if there is a sizes attribute (see #7500).
### Fixed
Remove the hardcoded figcaption width (see #7549).
### Fixed
Only load the model in the file/page picker if the class exists (see #7490).
### Fixed
Romanize style sheet names (see #7526).
### Fixed
Add the username to the "account has been locked" log entry (see #7551).
### Fixed
Consider the suhosin.memory_limit when raising the PHP limits (see #7035).
### Fixed
Added two missing `exclude` flags in the `tl_page` data container (see #7522).
### Fixed
Send an UTF-8 charset header in the `die_nicely()` function (see #7519).
### Fixed
Correctly validate dates in the `Widget` class (see #7498).
### Fixed
Back port the fixes from #7475 and #7473.
### Fixed
Send the same cache headers for cached and uncached pages (see #7455).
### Fixed
Fix the `current() expects parameter 1 to be array` issue (see #6739).
### Fixed
Correctly replace the `*_teaser` insert tags (see #7488).
### Fixed
Adjust the last and previous login labels (see #7426).
### Fixed
Unset the `postUnsafeRaw` cache in `Input::setPost()` (see #7481).
|
|
From Kamil Rytarowski <n54@gmx.com>
|
|
Version 3.2.17 (2015-01-22)
---------------------------
### Fixed
Romanize style sheet names (see #7526).
### Fixed
Add the username to the "account has been locked" log entry (see #7551).
### Fixed
Consider the suhosin.memory_limit when raising the PHP limits (see #7035).
### Fixed
Added two missing `exclude` flags in the `tl_page` data container (see #7522).
### Fixed
Send an UTF-8 charset header in the `die_nicely()` function (see #7519).
### Fixed
Correctly validate dates in the `Widget` class (see #7498).
### Fixed
Back port the fixes from #7475 and #7473.
### Fixed
Send the same cache headers for cached and uncached pages (see #7455).
### Fixed
Fix the `current() expects parameter 1 to be array` issue (see #6739).
### Fixed
Correctly replace the `*_teaser` insert tags (see #7488).
### Fixed
Adjust the last and previous login labels (see #7426).
### Fixed
Unset the `postUnsafeRaw` cache in `Input::setPost()` (see #7481).
|
|
lang/php54 5.4.37
lang/php55 5.5.21
lang/php56 5.6.5
|
|
22 Jan 2015, PHP 5.6.5
- Core:
. Upgraded crypt_blowfish to version 1.3. (Leigh)
. Fixed bug #60704 (unlink() bug with some files path).
. Fixed bug #65419 (Inside trait, self::class != __CLASS__). (Julien)
. Fixed bug #68536 (pack for 64bits integer is broken on bigendian). (Remi)
. Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
(Anatol)
. Fixed bug #68297 (Application Popup provides too few information). (Anatol)
. Fixed bug #65769 (localeconv() broken in TS builds). (Anatol)
. Fixed bug #65230 (setting locale randomly broken). (Anatol)
. Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR
correctly). (Ferenc)
. Fixed bug #68583 (Crash in timeout thread). (Anatol)
. Fixed bug #65576 (Constructor from trait conflicts with inherited
constructor). (dunglas at gmail dot com)
. Fixed bug #68676 (Explicit Double Free). (Kalle)
. Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
(CVE-2015-0231) (Stefan Esser)
- CGI:
. Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
(Stas)
- CLI server:
. Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam)
- cURL:
. Fixed bug #67643 (curl_multi_getcontent returns '' when
CURLOPT_RETURNTRANSFER isn't set). (Jille Timmermans)
- Date:
. Implemented FR #68268 (DatePeriod: Getter for start date, end date and
interval). (Marc Bennewitz)
- EXIF:
. Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
(Stas)
- Fileinfo:
. Fixed bug #68398 (msooxml matches too many archives). (Anatol)
. Fixed bug #68665 (invalid free in libmagic). (Joshua Rogers, Anatol Belski)
. Fixed bug #68671 (incorrect expression in libmagic).
(Joshua Rogers, Anatol Belski)
. Removed readelf.c and related code from libmagic sources
(Remi, Anatol)
. Fixed bug #68735 (fileinfo out-of-bounds memory access).
(Anatol)
- FPM:
. Fixed request #68526 (Implement POSIX Access Control List for UDS). (Remi)
. Fixed bug #68751 (listen.allowed_clients is broken). (Remi)
- GD:
. Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (Jan Bee, Remi)
. Fixed request #68656 (Report gd library version). (Remi)
- mbstring:
. Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
(Ashesh Vashi)
- Opcache:
. Fixed bug #68644 (strlen incorrect : mbstring + func_overload=2 +UTF-8
+ Opcache). (Laruence)
. Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach
loops). (Nikita)
- OpenSSL:
. Improved handling of OPENSSL_KEYTYPE_EC keys. (Dominic Luechinger)
- pcntl:
. Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler
when setting SIG_DFL). (Julien)
- PCRE:
. Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
(Rainer Jung, Anatol Belski)
- pgsql:
. Fixed bug #68697 (lo_export return -1 on failure). (Ondřej Surý)
- PDO:
. Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specifi
attribute names). (Matteo)
- PDO_mysql:
. Fixed bug #68424 (Add new PDO mysql connection attr to control multi
statements option). (peter dot wolanin at acquia dot com)
- SPL:
. Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME
breaks the RecursiveIterator). (Paul Garvin)
. Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv). (Salathe)
- SQLite:
. Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2). (Anatol)
- Streams:
. Fixed bug #68532 (convert.base64-encode omits padding bytes).
(blaesius at krumedia dot de)
|
|
22 Jan 2014, PHP 5.5.21
- Core:
. Upgraded crypt_blowfish to version 1.3. (Leigh)
. Fixed bug #60704 (unlink() bug with some files path).
. Fixed bug #65419 (Inside trait, self::class != __CLASS__). (Julien)
. Fixed bug #65576 (Constructor from trait conflicts with inherited
constructor). (dunglas at gmail dot com)
. Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
(Anatol)
. Fixed bug #68297 (Application Popup provides too few information). (Anatol)
. Fixed bug #65769 (localeconv() broken in TS builds). (Anatol)
. Fixed bug #65230 (setting locale randomly broken). (Anatol)
. Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR
correctly). (Ferenc)
. Fixed bug #68583 (Crash in timeout thread). (Anatol)
. Fixed bug #68594 (Use after free vulnerability in unserialize()).
(CVE-2014-8142) (Stefan Esser)
. Fixed bug #68676 (Explicit Double Free). (Kalle)
. Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
(CVE-2015-0231) (Stefan Esser)
- CGI:
. Fixed bug #68618 (out of bounds read crashes php-cgi).(CVE-2014-9427)
(Stas)
- CLI server:
. Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam)
- cURL:
. Fixed bug #67643 (curl_multi_getcontent returns '' when
CURLOPT_RETURNTRANSFER isn't set). (Jille Timmermans)
- EXIF:
. Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
(Stas)
- Fileinfo:
. Fixed bug #68671 (incorrect expression in libmagic).
(Joshua Rogers, Anatol Belski)
. Removed readelf.c and related code from libmagic sources
(Remi, Anatol)
. Fixed bug #68735 (fileinfo out-of-bounds memory access).
(Anatol)
- FPM:
. Fixed bug #68751 (listen.allowed_clients is broken). (Remi)
- GD:
. Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (Jan Bee, Remi)
- Mbstring:
. Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
(Ashesh Vashi)
- Mcrypt:
. Fixed possible read after end of buffer and use after free. (Dmitry)
- Opcache:
. Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach
loops). (Nikita)
- OpenSSL:
. Fixed bug #55618 (use case-insensitive cert name matching). (Daniel Lowrey)
- Pcntl:
. Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler
when setting SIG_DFL). (Julien)
- PCRE:
. Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
(Rainer Jung, Anatol Belski)
- pgsql:
. Fixed bug #68697 (lo_export return -1 on failure). (Ondřej Surý)
- PDO:
. Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specific
attribute names). (Matteo)
- PDO_mysql:
. Fixed bug #68424 (Add new PDO mysql connection attr to control multi
statements option). (peter dot wolanin at acquia dot com)
- SPL:
. Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME
breaks the RecursiveIterator). (Paul Garvin)
. Fixed bug #65213 (cannot cast SplFileInfo to boolean) (Tjerk)
. Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv). (Salathe)
- SQLite:
. Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2). (Anatol)
- Streams:
. Fixed bug #68532 (convert.base64-encode omits padding bytes).
(blaesius at krumedia dot de)
|
|
22 Jan 2015 PHP 5.4.37
- Core:
. Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
(CVE-2015-0231) (Stefan Esser)
- CGI:
. Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
(Stas)
- EXIF:
. Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232) (Stas)
- Fileinfo:
. Removed readelf.c and related code from libmagic sources
(Remi, Anatol)
. Fixed bug #68735 (fileinfo out-of-bounds memory access).
(Anatol)
- OpenSSL:
. Fixed bug #55618 (use case-insensitive cert name matching).
(Daniel Lowrey)
|
|
function strtoi.
From Kamil Rytarowski <n54@gmx.com>.
|
|
|
|
inline asm, clang 3.6+ explicitly checks and rejects this.
|