summaryrefslogtreecommitdiff
path: root/lang/php54
AgeCommit message (Collapse)AuthorFilesLines
2014-07-26Update php54 to 5.4.31.taca5-85/+21
24 Jul 2014, PHP 5.4.31 - Core: . Fixed bug #67428 (header('Location: foo') will override a 308-399 response code). (Adam) . Fixed bug #67436 (Autoloader isn't called if two method definitions don't match). (Bob) . Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0). (Ferenc) . Fixed bug #67151 (strtr with empty array crashes). (Nikita) . Fixed bug #67407 (Windows 8.1/Server 2012 R2 reported as Windows 8/Server 2012). (Christian Wenz) - CLI server: . Implemented FR #67429 (CLI server is missing some new HTTP response codes). (Adam) . Fixed bug #66830 (Empty header causes PHP built-in web server to hang). (Adam) - FPM: . Fixed bug #67530 (error_log=syslog ignored). (Remi) . Fixed bug #67531 (syslog cannot be set in pool configuration). (Remi) - Intl: . Fixed bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting). (Stas) - pgsql: . Fixed bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756), which affected builds against libpq < 7.3. (Adam) - Phar: . Fixed bug #67587 (Redirection loop on nginx with FPM). (Christian Weiske) - Streams: . Fixed bug #67430 (http:// wrapper doesn't follow 308 redirects). (Adam)
2014-07-13Add fix for CVE-2014-4698 and CVE-2014-4670.taca4-2/+50
Bump PKGREVISION.
2014-06-27Update php54 to 5.4.30 which includes several security fixes.taca2-6/+5
26 Jun 2014, PHP 5.4.30 - Core: . Fixed BC break introduced by patch for bug #67072. (Anatol, Stas) . Fixed bug #66622 (Closures do not correctly capture the late bound class (static::) in some cases). (Levi Morrison) . Fixed bug #67390 (insecure temporary file use in the configure script). (CVE-2014-3981) (Remi) . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas) . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability). (Stefan Esser) - CLI server: . Fixed Bug #67406 (built-in web-server segfaults on startup). (Remi) - Date: . Fixed bug #67308 (Serialize of DateTime truncates fractions of second). (Adam) . Fixed regression in fix for bug #67118 (constructor can't be called twice). (Remi) - Fileinfo: . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check). (CVE-2014-0207) . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal string size). (CVE-2014-3478) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary check). (CVE-2014-3479) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check). (CVE-2014-3480) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary check). (CVE-2014-3487) (Francisco Alonso, Jan Kaluza, Remi) - Intl: . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas) . Fixed bug #67397 (Buffer overflow in locale_get_display_name and uloc_getDisplayName (libicu 4.8.1)). (Stas) - Network: . Fixed bug #67432 (Fix potential segfault in dns_get_record()). (CVE-2014-4049). (Sara) - OpenSSL: . Fixed bug #65698 (certificates validity parsing does not work past 2050). (Paul Oehler) . Fixed bug #66636 (openssl_x509_parse warning with V_ASN1_GENERALIZEDTIME). (Paul Oehler) - SOAP: . Implemented FR #49898 (Add SoapClient::__getCookies()). (Boro Sitnikovski) - SPL: . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas) . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence) . Fixed bug #67360 (Missing element after ArrayObject::getIterator). (Adam) . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion) (CVE-2014-3515). (Stefan Esser)
2014-06-13Remove detection of a threaded Apache MPM at configure time.fhajny2-15/+71
Fixes the problem where thread safety was not consistent in the php, ap-php and php-* extension packages, and makes ap-php adhere to the maintainer-zts option. Bump PKGREVISION.
2014-06-13Add the mysqlnd (MySQL Native Driver) include files.fhajny3-3/+25
Bump PKGREVISION for this and the previous commit.
2014-06-13Fix problems on SunOS with the combination of FPM, event ports and ↵fhajny2-1/+49
catch_workers_output=yes. See https://bugs.php.net/bug.php?id=65800.
2014-05-31Update php54 to 5.4.29, contains fix for CVE-2014-0237 and CVE-2014-0238.taca2-8/+6
29 May 2014, PHP 5.4.29 - COM: . Fixed bug #66431 (Special Character via COM Interface (CP_UTF8)). (Anatol) - Core: . Fixed bug #65701 (copy() doesn't work when destination filename is created by tempnam()). (Boro Sitnikovski) . Fixed bug #67072 (Echoing unserialized "SplFileObject" crash). (Anatol) . Fixed bug #67245 (usage of memcpy() with overlapping src and dst in zend_exceptions.c). (Bob) . Fixed bug #67247 (spl_fixedarray_resize integer overflow). (Stas) . Fixed bug #67249 (printf out-of-bounds read). (Stas) . Fixed bug #67250 (iptcparse out-of-bounds read). (Stas) . Fixed bug #67252 (convert_uudecode out-of-bounds read). (Stas) - Date: . Fixed bug #67118 (DateTime constructor crash with invalid data). (Anatol) . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas) . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas) - DOM: . Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset). (Anatol) - Fileinfo: . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol) . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS). (CVE-2014-0238) . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in performance degradation). (CVE-2014-0237) - FPM: . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor). (Julio Pintos) - Phar: . Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent in its name). (PR #588)
2014-05-11Apply a patch to fix CVE-2014-2497, taken fromhe2-1/+33
https://bugs.php.net/patch-display.php?bug_id=66901 Bump PKGREVISION for php-gd correspondingly.
2014-05-02Update php54 to 5.4.28.taca2-14/+14
01 May 2014, PHP 5.4.28 - Core: . Fixed bug #61019 (Out of memory on command stream_get_contents). (Mike) . Fixed bug #64330 (stream_socket_server() creates wrong Abstract Namespace UNIX sockets). (Mike) . Fixed bug #66171 (Symlinks and session handler allow open_basedir bypass). (Jann Horn, Stas) . Fixed bug #66182 (exit in stream filter produces segfault). (Mike) . Fixed bug #66736 (fpassthru broken). (Mike) . Fixed bug #67024 (getimagesize should recognize BMP files with negative height). (Gabor Buella) - cURL: . Fixed bug #66562 (curl_exec returns differently than curl_multi_getcontent). (Freek Lijten) - Date: . Fixed bug #66721 (__wakeup of DateTime segfaults when invalid object data is supplied). (Boro Sitnikovski) - Embed: . Fixed bug #65715 (php5embed.lib isn't provided anymore). (Anatol) - Fileinfo: . Fixed bug #66987 (Memory corruption in fileinfo ext / bigendian). (Remi) - FPM: . Fixed bug #66482 (unknown entry 'priority' in php-fpm.conf). . Fixed bug #67060 (sapi/fpm: possible privilege escalation due to insecure default configuration) (CVE-2014-0185). (Stas) - JSON: . Fixed bug #66021 (Blank line inside empty array/object when JSON_PRETTY_PRINT is set). (Kevin Israel) - LDAP: . Fixed issue with null bytes in LDAP bindings. (Matthew Daley) - OpenSSL: . Fix bug #66942 (memory leak in openssl_seal()). (Chuan Ma) . Fix bug #66952 (memory leak in openssl_open()). (Chuan Ma) - SimpleXML: . Fixed bug #66084 (simplexml_load_string() mangles empty node name) (Anatol) - XSL: . Fixed bug #53965 (<xsl:include> cannot find files with relative paths when loaded with "file://"). (Anatol) - Apache2 Handler SAPI: . Fixed Apache log issue caused by APR's lack of support for %zu (APR issue https://issues.apache.org/bugzilla/show_bug.cgi?id=56120). (Jeff Trawick)
2014-04-05Update php54 to 5.4.27. CVE-2013-7345 is already fixed in 5.4.26nb2.taca6-32750/+21
03 Apr 2014, PHP 5.4.27 - Core: . Fixed bug #60602 (proc_open() changes environment array) (Tjerk) - Fileinfo: . Fixed bug #66946 (fileinfo: extensive backtracking in awk rule regular expression). (CVE-2013-7345) (Remi) - FPM: . Added clear_env configuration directive to disable clearenv() call. (Github PR# 598, Paul Annesley) - GMP . fixed bug#66872 (invalid argument crashes gmp_testbit) (Pierre) - Mail: . Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script) (Tjerk) - MySQLi: . Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed) (Remi) - Openssl: . Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1). (Remi)
2014-03-29Apply patch to fix CVE-2013-7345.he3-3/+32733
OK'ed by wiz.
2014-03-19Stop treating FreeBSD 10 as FreeBSD 1.asau5-5/+142
This lets a number of PHP extensions build. Bump package revision.
2014-03-09Update php54 to 5.4.26 (PHP 5.4.26).taca2-6/+5
Version 5.4.26 06-Mar-2014 * JSON: - Fixed bug #65753 (JsonSerializeable couldn't implement on module extension) * Fileinfo: - Fixed bug #66731 (file: infinite recursion) (CVE-2014-1943). - Fixed bug #66820 (out-of-bounds memory access in fileinfo) (CVE-2014-2270). * LDAP: - Implemented ldap_modify_batch (https://wiki.php.net/rfc/ldap_modify_batch). * Openssl: - Fixed bug #66501 (Add EC key support to php_openssl_is_private_key). * Pgsql: - Added warning for dangerous client encoding and remove possible injections for pg_insert()/pg_update()/pg_delete()/pg_select().
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-1/+2
2014-02-07Update php54 to 5.4.25.taca1-4/+4
06 Feb 2014, PHP 5.4.25 - Core: . Fixed bug #66286 (Incorrect object comparison with inheritance). (Nikita) . Fixed bug #66509 (copy() arginfo has changed starting from 5.4). (Will Fitch) - mysqlnd . Fixed bug #66283 (Segmentation fault after memory_limit). (Johannes) - PDO_pgsql: . Fixed bug #62479 (PDO-psql cannot connect if password contains spaces). (Will Fitch, Ilia) - Session: . Fixed bug #66481 (Calls to session_name() segfault when session.name is null). (Laruence)
2014-01-11Update php to 5.4.24.taca6-56/+24
09 Jan 2014, PHP 5.4.24 - Core: . Added validation of class names in the autoload process. (Dmitry) . Fixed invalid C code in zend_strtod.c. (Lior Kaplan) . Fixed bug #61645 (fopen and O_NONBLOCK). (Mike) - Date: . Fixed bug #66060 (Heap buffer over-read in DateInterval). (Remi) . Fixed bug #63391 (Incorrect/inconsistent day of week prior to the year 1600). (Derick, T. Carter) . Fixed bug #61599 (Wrong Day of Week). (Derick, T. Carter) - DOM: . Fixed bug #65196 (Passing DOMDocumentFragment to DOMDocument::saveHTML() Produces invalid Markup). (Mike) - Exif: . Fixed bug #65873 (Integer overflow in exif_read_data()). (Stas) - Filter: . Fixed bug #66229 (128.0.0.0/16 isn't reserved any longer). (Adam) - GD: . Fixed bug #64405 (Use freetype-config for determining freetype2 dir(s)). (Adam) - PDO_odbc: . Fixed bug #66311 (Stack smashing protection kills PDO/ODBC queries). (michael at orlitzky dot com) - SNMP: . Fixed SNMP_ERR_TOOBIG handling for bulk walk operations. (Boris Lytochkin) - XSL . Fixed bug #49634 (Segfault throwing an exception in a XSL registered function). (Mike) - ZIP: . Fixed Bug #66321 (ZipArchive::open() ze_obj->filename_len not real). (Remi)
2013-12-13Update php54 to 5.4.23 (PHP 5.4.23).taca2-6/+5
28 Nov 2013, PHP 5.4.23 - Core: . Fixed bug #66094 (unregister_tick_function tries to cast a Closure to a string). (Laruence) . Fixed bug #65947 (basename is no more working after fgetcsv in certain situation). (Laruence) - JSON . Fixed whitespace part of bug #64874 ("json_decode handles whitespace and case-sensitivity incorrectly"). (Andrea Faulds) - MySQLi: . Fixed bug #66043 (Segfault calling bind_param() on mysqli). (Laruence) - mysqlnd: . Fixed bug #66124 (mysqli under mysqlnd loses precision when bind_param with 'i'). (Andrey) . Fixed bug #66141 (mysqlnd quote function is wrong with NO_BACKSLASH_ESCAPES after failed query). (Andrey) - OpenSSL: . Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420). (Stefan Esser). - PDO . Fixed bug 65946 (sql_parser permanently converts values bound to strings)
2013-12-05Add fix for CVE-2013-6712, ext/date DoS vulnerability.taca4-2/+35
Bump PKGREVISION.
2013-11-16Update php54 to 5.4.22.taca1-4/+4
Version 5.4.22 14-Nov-2013 * Core: - Fixed bug #65911 (scope resolution operator - strange behavior with $this). CLI server: - Fixed bug #65818 (Segfault with built-in webserver and chunked transfer encoding). * Exif: - Fixed crash on unknown encoding. * FTP: - Fixed bug #65667 (ftp_nb_continue produces segfault). * ODBC: - Fixed bug #65950 (Field name truncation if the field name is bigger than 32 characters). * Sockets: - Fixed bug #65808 (the socket_connect() won't work with IPv6 address). * Standard: - Fixed bug #64760 (var_export() does not use full precision for floating-point numbers). * XMLReader: - Fixed bug #51936 (Crash with clone XMLReader). - Fixed bug #64230 (XMLReader does not suppress errors).
2013-11-07Fixed a typo in the DESCR files for PHPkhorben1-1/+1
2013-10-25Override clang -R test, the wrappers drop -R/usr/lib.joerg1-1/+7
2013-10-18Update php54 to 5.4.21 (PHP 5.4.21).taca1-4/+4
17 Oct 2013, PHP 5.4.21 - Core: . Fixed bug #65322 (compile time errors won't trigger auto loading). (Nikita) - CLI server: . Fixed bug #65633 (built-in server treat some http headers as case-sensitive). (Adam) - Datetime: . Fixed bug #64157 (DateTime::createFromFormat() reports confusing error message). (Boro Sitnikovski) - DBA extension: . Fixed bug #65708 (dba functions cast $key param to string in-place, bypassing copy on write). (Adam) - Filter: . Add RFC 6598 IPs to reserved addresses. (Sebastian Nohn) . Fixed bug #64441 (FILTER_VALIDATE_URL rejects fully qualified domain names). (Syra) - IMAP: . Fixed bug #65721 (configure script broken in 5.5.4 and 5.4.20 when enabling imap). (ryotakatsuki at gmail dot com) - Standard: . Fixed bug #61548 (content-type must appear at the end of headers for 201 Location to work in http). (Mike) - Build system: . Fixed bug #62396 ('make test' crashes starting with 5.3.14 (missing gzencode())). (Mike)
2013-09-21Update php54 to 5.4.20, approved by wiz@.taca5-48/+22
19 Sep 2013, PHP 5.4.20 - Core: . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation). (Laruence) . Fixed bug #65579 (Using traits with get_class_methods causes segfault). (Adam) . Fixed bug #65490 (Duplicate calls to get lineno & filename for DTRACE_FUNCTION_*). (Chris Jones) . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding spaces). (Michael M Slusarz) . Fixed bug #65481 (shutdown segfault due to serialize) (Mike) . Fixed bug #65470 (Segmentation fault in zend_error() with --enable-dtrace). (Chris Jones, Kris Van Hees) . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails). (Laruence) . Fixed bug #65304 (Use of max int in array_sum). (Laruence) . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case). (Arpad) . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert) . Improved fix for bug #63186 (compile failure on netbsd). (Matteo) . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees) . Fixed bug #61759 (class_alias() should accept classes with leading backslashes). (Julien) . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold) . Cherry-picked some DTrace build commits (allowing builds on Linux, bug #62691, and bug #63706) from PHP 5.5 branch . Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d) (Chris Jones) - cURL: . Fixed bug #65458 (curl memory leak). (Adam) - Datetime: . Fixed bug #65554 (createFromFormat broken when weekday name is followed by some delimiters). (Valentin Logvinskiy, Stas). . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught by AddressSanitizer). (Remi). - Openssl: . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in some cases). (Mark Jones) - Session: . Fixed bug #62129 (rfc1867 crashes php even though turned off). (gxd305 at gmail dot com) . Fixed bug #50308 (session id not appended properly for empty anchor tags). (Arpad) . Fixed possible buffer overflow under Windows. Note: Not a security fix. (Yasuo) . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo) - SOAP: . Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry) - SPL: . Fixed bug #65328 (Segfault when getting SplStack object Value). (Laruence) - PDO: . Fixed bug #64953 (Postgres prepared statement positional parameter casting). (Mike) - Phar: . Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents). (Stas) - Pgsql: . Fixed bug #65336 (pg_escape_literal/identifier() silently returns false). (Yasuo) . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()). (Yasuo) - Zlib: . Fixed bug #65391 (Unable to send vary header user-agent when ob_start('ob_gzhandler') is called) (Mike)
2013-08-23Update php54 to 5.4.19.taca1-4/+4
22 Aug 2013, PHP 5.4.19 - Core: . Fixed bug #64503 (Compilation fails with error: conflicting types for 'zendparse'). (Laruence) - Openssl: . Fixed UMR in fix for CVE-2013-4248.
2013-08-17Make sure to update distinfo. Thanks to Greg Oster noted the problem to me.taca1-2/+2
2013-08-16Update php54 to 5.4.18.taca7-276/+29
15 Aug 2013, PHP 5.4.18 - Core: . Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey avp200681 gmail com). . Fixed bug #65254 (Exception not catchable when exception thrown in autoload with a namespace). (Laruence) . Fixed bug #65108 (is_callable() triggers Fatal Error). (David Soria Parra, Laruence) . Fixed bug #65088 (Generated configure script is malformed on OpenBSD). (Adam) . Fixed bug #62964 (Possible XSS on "Registered stream filters" info). (david at nnucomputerwhiz dot com) . Fixed bug #62672 (Error on serialize of ArrayObject). (Lior Kaplan) . Fixed bug #62475 (variant_* functions causes crash when null given as an argument). (Felipe) . Fixed bug #60732 (php_error_docref links to invalid pages). (Jakub Vrana) . Fixed bug #65226 (chroot() does not get enabled). (Anatol) - CGI: . Fixed Bug #65143 (Missing php-cgi man page). (Remi) - CLI server: . Fixed bug #65066 (Cli server not responsive when responding with 422 http status code). (Adam) - CURL: . Fixed bug #62665 (curl.cainfo doesn't appear in php.ini). (Lior Kaplan) - FPM: . Fixed bug #63983 (enabling FPM borks compile on FreeBSD). (chibisuke at web dot de, Felipe) - FTP: . Fixed bug #65228 (FTPs memory leak with SSL). (marco dot beierer at mbsecurity dot ch) - GMP: . Fixed bug #65227 (Memory leak in gmp_cmp second parameter). (Felipe) - Imap: . Fixed bug #64467 (Segmentation fault after imap_reopen failure). (askalski at gmail dot com) - Intl: . Fixed bug #62759 (Buggy grapheme_substr() on edge case). (Stas) . Fixed bug #61860 (Offsets may be wrong for grapheme_stri* functions). (Stas) - mysqlnd: . Fixed segfault in mysqlnd when doing long prepare. (Andrey) - ODBC: . Fixed bug #61387 (NULL valued anonymous column causes segfault in odbc_fetch_array). (Brandon Kirsch) - Openssl: . Fixed handling null bytes in subjectAltName (CVE-2013-4073). (Christian Heimes) - PDO: . Allowed PDO_OCI to compile with Oracle Database 12c client libraries. (Chris Jones) - PDO_dblib: . Fixed bug #65219 (PDO/dblib not working anymore ("use dbName" not sent)). (Stanley Sufficool) - PDO_pgsql: . Fixed meta data retrieve when OID is larger than 2^31. (Yasuo) - Phar: . Fixed Bug #65142 (Missing phar man page). (Remi) - Session . Fixed bug #62535 ($_SESSION[$key]["cancel_upload"] doesn't work as documented). (Arpad) . Fixed bug #35703 (when session_name("123") consist only digits, should warning). (Yasuo) . Fixed bug #49175 (mod_files.sh does not support hash bits). Patch by oorza2k5 at gmail dot com (Yasuo) - Sockets: . Implemented FR #63472 (Setting SO_BINDTODEVICE with socket_set_option). (Damjan Cvetko) - SPL: . Fixed bug #65136 (RecursiveDirectoryIterator segfault). (Laruence) . Fixed bug #61828 (Memleak when calling Directory(Recursive)Iterator /Spl(Temp)FileObject ctor twice). (Laruence) . Fixed bug #60560 (SplFixedArray un-/serialize, getSize(), count() return 0, keys are strings). (Adam) - XML: . Fixed bug #65236 (heap corruption in xml parser, CVE-2013-4113). (Rob)
2013-08-16Since openssl's security problem has assigned CVE-2013-4248, update commenttaca2-4/+4
in the patch file.
2013-08-14Add fix fo openssl, CVE-2013-4073.taca3-3/+118
Bump PKGREVISION.
2013-08-13Allow only the PHP version itself, otherwise the multi-version logicjoerg1-1/+3
will trigger with failing distinfo entries.
2013-07-29Add fix for CVE-2013-4113 as php 5.3.27. (It will be fixed in next PHP 5.4taca3-2/+141
release.) Bump PKGREVISION.
2013-07-29Explicitly note it is PHP 5.4.x pacakge in COMMENT of Makefile and DESCRtaca2-2/+4
file.
2013-07-29Move PHP_CHECK_INSTALLED to before including Makefile.php since it shouldtaca2-3/+3
be defined before including lang/php/phpversion.mk.
2013-07-21Clean up php's framework.taca4-77/+12
* Define PHP's version at one place. * Remove obsolete description in comments. * Add "used by www/php-fpm/Makefile" in php5[34]/Makefile.php. * Remove commented out support for suhosin extension from php54. * Add PHP_CHECK_INSTALLED and PHP_EXTENSION_DIR to php/phpversion.mk. No functional should be made.
2013-07-15* .include "../../devel/readline/buildlink3.mk" with USE_GNU_READLINE=yesryoon1-2/+1
are replaced with .include "../../devel/readline/buildlink3.mk", and USE_GNU_READLINE are removed, * .include "../../devel/readline/buildlink3.mk" without USE_GNU_READLINE are replaced with .include "../../mk/readline.buildlink3.mk".
2013-07-08Correct condition for NetBSD 6.0 and later to fix build problem on NetBSDtaca2-1/+17
6.0. Reported by J«Órn Clausen as PR pkg/48029.
2013-07-07Update php54 to 5.4.17.taca3-34/+6
04 Jul 2013, PHP 5.4.17 - Core: . Fixed bug #64988 (Class loading order affects E_STRICT warning). (Laruence) . Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC). (Laruence) . Fixed bug #64960 (Segfault in gc_zval_possible_root). (Laruence) . Fixed bug #64936 (doc comments picked up from previous scanner run). (Stas, Jonathan Oddy) . Fixed bug #64934 (Apache2 TS crash with get_browser()). (Anatol) . Fixed bug #64166 (quoted-printable-encode stream filter incorrectly discarding whitespace). (Michael M Slusarz) - DateTime: . Fixed bug #53437 (Crash when using unserialized DatePeriod instance). (Gustavo, Derick, Anatol) - FPM: . Fixed Bug #64915 (error_log ignored when daemonize=0). (Remi) . Implemented FR #64764 (add support for FPM init.d script). (Lior Kaplan) - PDO: . Fixed bug #63176 (Segmentation fault when instantiate 2 persistent PDO to the same db server). (Laruence) - PDO_DBlib: . Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib). (Stanley Sufficool) . Fixed bug #64338 (pdo_dblib can't connect to Azure SQL). (Stanley Sufficool) . Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not executed statement crashes). (Stanley Sufficool) - PDO_firebird: . Fixed bug #64037 (Firebird return wrong value for numeric field). (Matheus Degiovani, Matteo) . Fixed bug #62024 (Cannot insert second row with null using parametrized query). (patch by james@kenjim.com, Matheus Degiovani, Matteo) - PDO_mysql: . Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT, TINYINT and YEAR). (Antony, Daniel Beardsley) - PDO_pgsql: . Fixed Bug #64949 (Buffer overflow in _pdo_pgsql_error). (Remi) - pgsql: . Fixed bug #64609 (pg_convert enum type support). (Matteo) - Readline: . Implement FR #55694 (Expose additional readline variable to prevent default filename completion). (Hartmel) - SPL: . Fixed bug #64997 (Segfault while using RecursiveIteratorIterator on 64-bits systems). (Laruence)
2013-06-07Update php54 to 5.4.16.taca2-6/+6
06 Jun 2013, PHP 5.4.16 - Core: . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode, CVE 2013-2110). (Stas) . Fixed bug #64853 (Use of no longer available ini directives causes crash on TS build). (Anatol) . Fixed bug #64729 (compilation failure on x32). (Gustavo) . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry) . Fixed bug #64660 (Segfault on memory exhaustion within function definition). (Stas, reported by Juha Kylm«£nen) - Calendar: . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi) - Fileinfo: . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol) - FPM: . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi) . Fixed some possible memory or resource leaks and possible null dereference detected by code coverity scan. (Remi) . Log a warning when a syscall fails. (Remi) . Add --with-fpm-systemd option to report health to systemd, and systemd_interval option to configure this. The service can now use Type=notify in the systemd unit file. (Remi) - MySQLi . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB pointer has closed). (Laruence) - Phar . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or with non std tmp dir). (Pierre) - SNMP: . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong). (Boris Lytochkin) . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin) - Streams: . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open() on Windows x64). (Anatol) - Zend Engine: . Fixed bug #64821 (Custom Exceptions crash when internal properties overridden). (Anatol)
2013-05-16Update php54 to 5.4.15 (PHP 5.4.15).taca3-22/+6
09 May 2013, PHP 5.4.15 - Core: . Fixed bug #64578 (debug_backtrace in set_error_handler corrupts zend heap: segfault). (Laruence) . Fixed bug #64458 (dns_get_record result with string of length -1). (Stas) . Fixed bug #64433 (follow_location parameter of context is ignored for most response codes). (Sergey Akbarov) . Fixed bugs #47675 and #64577 (fd leak on Solaris) - Fileinfo: . Upgraded libmagic to 5.14. (Anatol) - Zip: . Fixed bug #64342 (ZipArchive::addFile() has to check for file existence). (Anatol) - Streams: . Fixed Windows x64 version of stream_socket_pair() and improved error handling (Anatol Belski)
2013-04-12Update php54 to 5.4.14.taca2-6/+6
11 Apr 2013, PHP 5.4.14 - Core . Fixed bug #64529 (Ran out of opcode space). (Dmitry) . Fixed bug #64515 (Memoryleak when using the same variablename two times in function declaration). (Laruence) . Fixed bug #64432 (more empty delimiter warning in strX methods). (Laruence) . Fixed bug #64417 (ArrayAccess::&offsetGet() in a trait causes fatal error). (Dmitry) . Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']). (Anatol) . Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10 or 5.4.11). (Dmitry, Laruence) . Fixed bug #63976 (Parent class incorrectly using child constant in class property). (Dmitry) . Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not handle exceptions properly). (Jeff Welch) . Fixed bug #62343 (Show class_alias In get_declared_classes()) (Dmitry) - PCRE: . Merged PCRE 8.32. (Anatol) - SNMP: . Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly). (Boris Lytochkin) - Zip: . Bug #64452 (Zip crash intermittently). (Anatol)
2013-03-16Update php54 to 5.4.13.taca3-8/+7
14 Mar 2012, PHP 5.4.13 - Core: . Fixed bug #64235 (Insteadof not work for class method in 5.4.11). (Laruence) . Implemented FR #64175 (Added HTTP codes as of RFC 6585). (Jonh Wendell) . Fixed bug #64142 (dval to lval different behavior on ppc64). (Remi) . Fixed bug #64070 (Inheritance with Traits failed with error). (Dmitry) - CLI server: . Fixed bug #64128 (buit-in web server is broken on ppc64). (Remi) - Mbstring: . mb_split() can now handle empty matches like preg_split() does. (Moriyoshi) - OpenSSL: . Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()). (Stas) - PDO_mysql: . Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs). (Johannes) - Phar: . Fixed timestamp update on Phar contents modification. (Dmitry) - SOAP . Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635). (Dmitry) . Disabled external entities loading (CVE-2013-1643). (Dmitry) - SPL: . Fixed bug #64264 (SPLFixedArray toArray problem). (Laruence) . Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS). (patch by kriss@krizalys.com, Laruence) . Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended). (Nikita Popov) . Fixed bug #52861 (unset fails with ArrayObject and deep arrays). (Mike Willbanks) - SNMP: . Fixed bug #64124 (IPv6 malformed). (Boris Lytochkin)
2013-02-28Uncomment the pid parameter of php-fpm.conf so the pidfile is created andimil3-2/+20
rc.d script can really start / stop php-fpm. Bump PKGREVISION.
2013-02-22Update php54 to 5.4.12.taca4-24/+7
PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 21 Feb 2012, PHP 5.4.12 - Core: . Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes) . Fixed bug #64011 (get_html_translation_table() output incomplete with HTML_ENTITIES and ISO-8859-1). (Gustavo) . Fixed bug #63982 (isset() inconsistently produces a fatal error on protected property). (Stas) . Fixed bug #63943 (Bad warning text from strpos() on empty needle). (Laruence) . Fixed bug #63899 (Use after scope error in zend_compile). (Laruence) . Fixed bug #63893 (Poor efficiency of strtr() using array with keys of very different length). (Gustavo) . Fixed bug #63882 (zend_std_compare_objects crash on recursion). (Dmitry) . Fixed bug #63462 (Magic methods called twice for unset protected properties). (Stas) . Fixed bug #62524 (fopen follows redirects for non-3xx statuses). (Wes Mason) . Support BITMAPV5HEADER in getimagesize(). (AsamK, Lars) - Date: . Fixed bug #63699 (Performance improvements for various ext/date functions). (Lars, original patch by njaguar at gmail dot com) . Fixed bug #55397: Comparsion of incomplete DateTime causes SIGSEGV. (Derick) - FPM: . Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam) - Litespeed: . Fixed bug #63228 (-Werror=format-security error in lsapi code). (George) - SOAP . Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635). (Dmitry) . Disabled external entities loading (CVE-2013-1643). (Dmitry) - sqlite3: . Fixed bug #63921 (sqlite3::bindvalue and relative PHP functions aren't using sqlite3_*_int64 API). (srgoogleguy, Lars) - PDO_OCI . Fixed bug #57702 (Multi-row BLOB fetches). (hswong3i, Laruence) . Fixed bug #52958 (Segfault in PDO_OCI on cleanup after running a long testsuite). (hswong3i, Lars) - PDO_sqlite: . Fixed bug #63916 (PDO::PARAM_INT casts to 32bit int internally even on 64bit builds in pdo_sqlite). (srgoogleguy, Lars)
2013-02-17Fix build problem of graphics/php-gd with png 1.6.0.taca2-6/+6
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-1/+2
2013-01-17Update php54 to 5.4.11.taca3-11/+11
17 Jan 2013, PHP 5.4.11 - Core: . Fixed bug #63762 (Sigsegv when Exception::$trace is changed by user). (Johannes) . Fixed bug #43177 (Errors in eval()'ed code produce status code 500). (Todd Ruth, Stas). - Filter: . Fixed bug #63757 (getenv() produces memory leak with CGI SAPI). (Dmitry) . Fixed bug #54096 (FILTER_VALIDATE_INT does not accept +0 and -0). (martin at divbyzero dot net, Lars) - JSON: . Fixed bug #63737 (json_decode does not properly decode with options parameter). (Adam) - CLI server . Update list of common mime types. Added webm, ogv, ogg. (Lars, pascalc at gmail dot com) - cURL extension: . Fixed bug (segfault due to libcurl connection caching). (Pierrick) . Fixed bug #63859 (Memory leak when reusing curl-handle). (Pierrick) . Fixed bug #63795 (CURL >= 7.28.0 no longer support value 1 for CURLOPT_SSL_VERIFYHOST). (Pierrick) . Fixed bug #63352 (Can't enable hostname validation when using curl stream wrappers). (Pierrick) . Fixed bug #55438 (Curlwapper is not sending http header randomly). (phpnet@lostreality.org, Pierrick)
2013-01-07Update php54 to 5.4.10.taca2-6/+6
20 Dec 2012, PHP 5.4.10 - Core: . Fixed bug #63635 (Segfault in gc_collect_cycles). (Dmitry) . Fixed bug #63512 (parse_ini_file() with INI_SCANNER_RAW removes quotes from value). (Pierrick) . Fixed bug #63468 (wrong called method as callback with inheritance). (Laruence) . Fixed bug #63451 (config.guess file does not have AIX 7 defined, shared objects are not created). (kemcline at au1 dot ibm dot com) . Fixed bug #61557 (Crasher in tt-rss backend.php). (i dot am dot jack dot mail at gmail dot com) . Fixed bug #61272 (ob_start callback gets passed empty string). (Mike, casper at langemeijer dot eu) - Date: . Fixed bug #63666 (Poor date() performance). (Paul Talborg). . Fixed bug #63435 (Datetime::format('u') sometimes wrong by 1 microsecond). (Remi) - Imap: . Fixed bug #63126 (DISABLE_AUTHENTICATOR ignores array). (Remi) - Json: . Fixed bug #63588 (use php_next_utf8_char and remove duplicate implementation). (Remi) - MySQLi: . Fixed bug #63361 (missing header). (Remi) - MySQLnd: . Fixed bug #63398 (Segfault when polling closed link). (Laruence) - Fileinfo: . Fixed bug #63590 (Different results in TS and NTS under Windows). (Anatoliy) - FPM: . Fixed bug #63581 Possible null dereference and buffer overflow (Remi) - Pdo_sqlite: . Fixed Bug #63149 getColumnMeta should return the table name when system SQLite used. (Remi) - Apache2 Handler SAPI: . Enabled Apache 2.4 configure option for Windows (Pierre, Anatoliy) - Reflection: . Fixed Bug #63614 (Fatal error on Reflection). (Laruence) - SOAP . Fixed bug #63271 (SOAP wsdl cache is not enabled after initial requests). (John Jawed, Dmitry) - Sockets . Fixed bug #49341 (Add SO_REUSEPORT support for socket_set_option()). (Igor Wiedler, Lars)
2012-11-23Update php54 to 5.4.9.taca2-6/+6
22 Nov 2012, PHP 5.4.9 - Core: . Fixed bug #63305 (zend_mm_heap corrupted with traits). (Dmitry, Laruence) . Fixed bug #63369 ((un)serialize() leaves dangling pointers, causes crashes). (Tony, Andrew Sitnikov) . Fixed bug #63241 (PHP fails to open Windows deduplicated files). (daniel dot stelter-gliese at innogames dot de) . Fixed bug #62444 (Handle leak in is_readable on windows). (krazyest at seznam dot cz) - Curl: . Fixed bug #63363 (Curl silently accepts boolean true for SSL_VERIFYHOST). Patch by John Jawed GitHub PR #221 (Anthony) - Fileinfo: . Fixed bug #63248 (Load multiple magic files from a directory under Windows). (Anatoliy) - Libxml . Fixed bug #63389 (Missing context check on libxml_set_streams_context() causes memleak). (Laruence) - Mbstring: . Fixed bug #63447 (max_input_vars doesn't filter variables when mbstring.encoding_translation = On). (Laruence) - OCI8: . Fixed bug #63265 (Add ORA-00028 to the PHP_OCI_HANDLE_ERROR macro) (Chris Jones) - PCRE: . Fixed bug #63180 (Corruption of hash tables). (Dmitry) . Fixed bug #63055 (Segfault in zend_gc with SF2 testsuite). (Dmitry, Laruence) . Fixed bug #63284 (Upgrade PCRE to 8.31). (Anatoliy) - PDO: . Fixed bug #63235 (buffer overflow in use of SQLGetDiagRec). (Martin Osvald, Remi) - PDO_pgsql: . Fixed bug #62593 (Emulate prepares behave strangely with PARAM_BOOL). (Will Fitch) - Phar: . Fixed bug #63297 (Phar fails to write an openssl based signature). (Anatoliy) - Streams: . Fixed bug #63240 (stream_get_line() return contains delimiter string). (Tjerk, Gustavo) - Reflection: . Fixed bug #63399 (ReflectionClass::getTraitAliases() incorrectly resolves traitnames). (Laruence)
2012-10-19Update php54 to 5.4.8.taca2-6/+6
18 Oct 2012, PHP 5.4.8 - CLI server: . Changed response to unknown HTTP method to 501 according to RFC. (Niklas Lindgren). . Support HTTP PATCH method. Patch by Niklas Lindgren, GitHub PR #190. (Lars) - Core: . Added optional second argument for assert() to specify custom message. Patch by Lonny Kapelushnik (lonny@lonnylot.com). (Lars) . Support building PHP with the native client toolchain. (Stuart Langley) . Added --offline option for tests. (Remi) . Fixed bug #63162 (parse_url does not match password component). (husman) . Fixed bug #63111 (is_callable() lies for abstract static method). (Dmitry) . Fixed bug #63093 (Segfault while load extension failed in zts-build). (Laruence) . Fixed bug #62976 (Notice: could not be converted to int when comparing some builtin classes). (Laruence) . Fixed bug #62955 (Only one directive is loaded from "Per Directory Values" Windows registry). (aserbulov at parallels dot com) . Fixed bug #62907 (Double free when use traits). (Dmitry) . Fixed bug #61767 (Shutdown functions not called in certain error situation). (Dmitry) . Fixed bug #60909 (custom error handler throwing Exception + fatal error = no shutdown function). (Dmitry) . Fixed bug #60723 (error_log error time has changed to UTC ignoring default timezone). (Laruence) - cURL: . Fixed bug #62085 (file_get_contents a remote file by Curl wrapper will cause cpu Soaring). (Pierrick) - Date: . Fixed bug #62896 ("DateTime->modify('+0 days')" modifies DateTime object) (Lonny Kapelushnik) . Fixed bug #62561 (DateTime add 'P1D' adds 25 hours). (Lonny Kapelushnik) - DOM: . Fixed bug #63015 (Incorrect arginfo for DOMErrorHandler). (Rob) - FPM: . Fixed bug #62954 (startup problems fpm / php-fpm). (fat) . Fixed bug #62886 (PHP-FPM may segfault/hang on startup). (fat) . Fixed bug #63085 (Systemd integration and daemonize). (remi, fat) . Fixed bug #62947 (Unneccesary warnings on FPM). (fat) . Fixed bug #62887 (Only /status?plain&full gives "last request cpu"). (fat) . Fixed bug #62216 (Add PID to php-fpm init.d script). (fat) - OpenSSL: . Implemented FR #61421 (OpenSSL signature verification missing RMD160, SHA224, SHA256, SHA384, SHA512). (Mark Jones) - SOAP . Fixed bug #50997 (SOAP Error when trying to submit 2nd Element of a choice). (Dmitry) - SPL: . Bug #62987 (Assigning to ArrayObject[null][something] overrides all undefined variables). (Laruence) - mbstring: . Allow passing null as a default value to mb_substr() and mb_strcut(). Patch by Alexander Moskaliov via GitHub PR #133. (Lars) - Filter extension: . Bug #49510: Boolean validation fails with FILTER_NULL_ON_FAILURE with empty string or false. (Lars) - Sockets . Fixed bug #63000 (MCAST_JOIN_GROUP on OSX is broken, merge of PR 185 by Igor Wiedler). (Lars)
2012-10-02Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-2/+1
2012-09-14Update php54 to 5.4.7 (PHP 5.4.7).taca2-6/+6
13 Sep 2012, PHP 5.4.7 - Core: . Fixed bug (segfault while build with zts and GOTO vm-kind). (Laruence) . Fixed bug #62955 (Only one directive is loaded from "Per Directory Values" Windows registry). (Felipe) . Fixed bug #62844 (parse_url() does not recognize //). (Andrew Faulds). . Fixed bug #62829 (stdint.h included on platform where HAVE_STDINT_H is not set). (Felipe) . Fixed bug #62763 (register_shutdown_function and extending class). (Laruence) . Fixed bug #62725 (Calling exit() in a shutdown function does not return the exit value). (Laruence) . Fixed bug #62744 (dangling pointers made by zend_disable_class). (Laruence) . Fixed bug #62716 (munmap() is called with the incorrect length). (slangley@google.com) . Fixed bug #62358 (Segfault when using traits a lot). (Laruence) . Fixed bug #62328 (implementing __toString and a cast to string fails) (Laruence) . Fixed bug #51363 (Fatal error raised by var_export() not caught by error handler). (Lonny Kapelushnik) . Fixed bug #40459 (Stat and Dir stream wrapper methods do not call constructor). (Stas) - CURL: . Fixed bug #62912 (CURLINFO_PRIMARY_* AND CURLINFO_LOCAL_* not exposed). (Pierrick) . Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE). (Pierrick) - DateTime: . Fixed bug #62852 (Unserialize invalid DateTime causes crash). (reeze.xia@gmail.com) - Intl: . Fixed Spoofchecker not being registered on ICU 49.1. (Gustavo) . Fix bug #62933 (ext/intl compilation error on icu 3.4.1). (Gustavo) . Fix bug #62915 (defective cloning in several intl classes). (Gustavo) - Installation: . Fixed bug #62460 (php binaries installed as binary.dSYM). (Reeze Xia) - PCRE: . Fixed bug #55856 (preg_replace should fail on trailing garbage). (reg dot php at alf dot nu) - PDO: . Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()). (Laruence) - Reflection: . Fixed bug #62892 (ReflectionClass::getTraitAliases crashes on importing trait methods as private). (Felipe) . Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong result). (Laruence) - Session: . Fixed bug (segfault due to retval is not initialized). (Laruence) . Fixed bug (segfault due to PS(mod_user_implemented) not be reseted when close handler call exit). (Laruence) - SPL: . Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray) (Laruence) . Implemented FR #62840 (Add sort flag to ArrayObject::ksort). (Laruence) - Standard: . Fixed bug #62836 (Seg fault or broken object references on unserialize()). (Laruence) - FPM: . Merged PR 121 by minitux to add support for slow request counting on PHP FPM status page. (Lars)
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-14 07:08:22 +0000