summaryrefslogtreecommitdiff
path: root/lang/php5
AgeCommit message (Collapse)AuthorFilesLines
2007-04-08Fix reference to ap-php package, from PR#35927.ghen1-2/+2
2007-02-25put back openssl extension, mistakely commented out in PHP 5.2.1 upgradejdolecek2-7/+8
noted by Manuel Bouyer
2007-02-22pkglint USE_LANGUAGES cleanup. Patch from Sergey Svishchev.wiz1-2/+2
2007-02-22pkglint cleanup; update HOMEPAGE/MASTER_SITES.wiz1-2/+2
From Sergey Svishchev in private mail.
2007-02-20Update PHP5 to 5.2.1. Includes several important security fixes andjdolecek6-54/+59
large number of other fixes. Update for all users is strongly advised.
2006-11-07Make "php-5.2.0" build with "curl-7.16.0".tron2-6/+24
2006-11-07Fix non-portable "configure" shell script.tron2-1/+15
2006-11-07Remove non-existing master site "ftp.php.net".tron1-3/+2
2006-11-06Update lang/php5 to 5.2.0.jdolecek1-1/+3
Changes since 5.1.6: The key features of PHP 5.2.0 include: * New memory manager for the Zend Engine with improved performance and a more accurate memory usage tracking. * Input filtering extension was added and enabled by default. * JSON extension was added and enabled by default. * ZIP extension for creating and editing zip files was introduced. * Hooks for tracking file upload progress were introduced. * Introduced E_RECOVERABLE_ERROR error mode. * Introduced DateTime and DateTimeZone objects with methods to manipulate date/time information. * Upgraded bundled SQLite, PCRE libraries. * Upgraded OpenSSL, MySQL and PostgreSQL client libraries for Windows installations. * Many performance improvements. * Over 200 bug fixes. Security Enhancements and Fixes in PHP 5.2.0: * Made PostgreSQL escaping functions in PostgreSQL and PDO extension keep track of character set encoding whenever possible. * Added allow_url_include, set to Off by default to disallow use of URLs for include and require. * Disable realpath cache when open_basedir and safe_mode are being used. * Improved safe_mode enforcement for error_log() function. * Fixed a possible buffer overflow in the underlying code responsible for htmlspecialchars() and htmlentities() functions. * Added missing safe_mode and open_basedir checks for the cURL extension. * Fixed overflow is str_repeat() & wordwrap() functions on 64bit machines. * Fixed handling of long paths inside the tempnam() function. * Fixed safe_mode/open_basedir checks for session.save_path, allowing them to account for extra parameters. * Fixed ini setting overload in the ini_restore() function. For a full list of changes in PHP 5.2.0, see the ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.0 Also other notable extensions changes: * filePRO extension removed (not in PECL yet, php-filepro disabled for PHP5) * JSON added (not enabled by default, packaged in php-json) * filter added (enabled by default) * wddx rewritten to native libxml2, fixing several encoding bugs
2006-11-06Update lang/php5 to 5.2.0.jdolecek9-130/+15
Changes since 5.1.6: The key features of PHP 5.2.0 include: * New memory manager for the Zend Engine with improved performance and a more accurate memory usage tracking. * Input filtering extension was added and enabled by default. * JSON extension was added and enabled by default. * ZIP extension for creating and editing zip files was introduced. * Hooks for tracking file upload progress were introduced. * Introduced E_RECOVERABLE_ERROR error mode. * Introduced DateTime and DateTimeZone objects with methods to manipulate date/time information. * Upgraded bundled SQLite, PCRE libraries. * Upgraded OpenSSL, MySQL and PostgreSQL client libraries for Windows installations. * Many performance improvements. * Over 200 bug fixes. Security Enhancements and Fixes in PHP 5.2.0: * Made PostgreSQL escaping functions in PostgreSQL and PDO extension keep track of character set encoding whenever possible. * Added allow_url_include, set to Off by default to disallow use of URLs for include and require. * Disable realpath cache when open_basedir and safe_mode are being used. * Improved safe_mode enforcement for error_log() function. * Fixed a possible buffer overflow in the underlying code responsible for htmlspecialchars() and htmlentities() functions. * Added missing safe_mode and open_basedir checks for the cURL extension. * Fixed overflow is str_repeat() & wordwrap() functions on 64bit machines. * Fixed handling of long paths inside the tempnam() function. * Fixed safe_mode/open_basedir checks for session.save_path, allowing them to account for extra parameters. * Fixed ini setting overload in the ini_restore() function. For a full list of changes in PHP 5.2.0, see the ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.0 Also other notable extensions changes: * filePRO extension removed (not in PECL yet, php-filepro disabled for PHP5) * JSON added (not enabled by default, packaged in php-json) * filter added (enabled by default) * wddx rewritten to native libxml2, fixing several encoding bugs
2006-11-04Fix for CVE-2006-5465 from PHP CVSadrianp3-3/+36
http://www.hardened-php.net/advisory_132006.138.html
2006-11-01Add patch to make the "php-curl" package build with version 7.16.0tron2-1/+21
and newer of the "curl" package.
2006-10-22Fixes for CVE-2006-4812 and CVE-2006-4625adrianp4-3/+43
Bump nb
2006-10-20remove --enable-memory-limit - 8MB is too low, and this justjdolecek2-5/+3
duplicates process resource limits, which already provide necessary "safety net" protection against rogue scripts bump PKGREVISION for this adressess PR pkg/32007 by "pancake" also remove --enable-track-vars, since that configure argument is long gone from PHP
2006-08-28Update php5 to 5.1.5.taca2-6/+6
PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 24 Aug 2006, PHP 5.1.6 - Fixed memory_limit on 64bit systems. (Stefan E.) - Fixed bug #38488 (Access to "php://stdin" and family crashes PHP on win32). (Dmitry)
2006-08-19Remove special DIST_SUBDIR processing from Makefile.taca2-8/+5
2006-08-19Update php5 package to 5.1.5:taca8-140/+23
17 Aug 2006, PHP 5.1.5 - Fixed memory_limit on 64bit systems. (Stefan E.) - Fixed overflow on 64bit systems in str_repeat() and wordwrap(). (Stefan E.) - Disabled CURLOPT_FOLLOWLOCATION in curl when open_basedir or safe_mode are enabled. (Stefan E., Ilia) - Fixed bug #38322 (reading past array in sscanf() leads to arbitrary code execution). (Tony) - Fixed bug #38125 (undefined reference to spl_dual_it_free_storage). (Marcus) - Fixed bug #38112 (corrupted gif segfaults) (Pierre) - Fixed bug #37587 (var without attribute causes segfault). (Marcus) - Fixed bug #37576 (FastCGI env (cgi vars) table overflow). (Piotr) - Fixed bug #37496 (FastCGI output buffer overrun). (Piotr, Dmitry) - Fixed bug #37487 (oci_fetch_array() array-type should always default to OCI_BOTH). (Tony) - Fixed bug #37416 (iterator_to_array() hides exceptions thrown in rewind() method). (Tony) - Fixed bug #37392 (Unnecessary call to OCITransRollback() at the end of request). (Tony) - Fixed bug #37341 ($_SERVER in included file is shortened to two entries, if $_ENV gets used). (Dmitry) - Fixed bug #37313 (sigemptyset() used without including <signal.h>). (jdolecek) - Fixed bug #37346 (invalid colormap format) (Pierre) - Fixed bug #37360 (invalid gif size) (Pierre) - Fixed bug #37306 (max_execution_time = max_input_time). (Dmitry) - Fixed Bug #37278 (SOAP not respecting uri in __soapCall). (Dmitry) - Fixed bug #37265 (Added missing safe_mode & open_basedir checks to imap_body()). (Ilia) - Fixed bug #37256 (php-fastcgi dosen't handle connection abort). (Dmitry)
2006-08-19More fix of PLIST, now pkg_delete should always succeed.taca2-3/+5
2006-08-17Correct PLIST to fix a binary package:taca2-4/+5
- remove an extra directory. - handle empty directories.
2006-08-10Add security fix for Secunia Advisory SA21403 from PHP's CVS repository.taca3-3/+85
Bump PKGREVISION.
2006-07-18Fix for CVE-2006-3011adrianp3-3/+19
Bump to nb2
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-08Sync DIST_SUBDIR for PHP modules with DIST_SUBDIR in Makefile.minskim1-2/+2
2006-07-08Change DIST_SUBDIR because the current distfile path was already used beforeminskim2-6/+6
for a different tarball.
2006-06-06Note in the MESSAGE file the path to the PHP CGI binary to answer an FAQ.jlam2-4/+12
2006-06-05Specify explicitly where openssl can be found.minskim1-2/+2
2006-06-05This package needs lex to build. Add it to USE_TOOLS.minskim1-2/+2
2006-05-23add patch for WDDX non-ASCII serializer/deserializer problem, reportedjdolecek2-1/+16
as PHP Bug 37569 and 37571
2006-05-17Use PKGNAME_NOREV for DIST_SUBDIR (instead of just PKGNAME).reed2-6/+6
As reported by Christopher W. Richardson on tech-pkg.
2006-05-16Tarball on php.net has changed to include the pear installation fileadrianp2-21/+7
Modify the package to not seperately fetch the pear file from php.net Problem found by Christopher W. Richardson on tech-pkg@ Bump PKGREVISION
2006-05-07Get distribtion file from sub directory in derived packages, too.tron1-3/+5
2006-05-07Added missing DIST_SUBDIRmartti1-2/+2
2006-05-07update distinfo (part of PR pkg/33432 fix)jdolecek1-4/+6
2006-05-07fetch PEAR installation archive too, to avoid use of wget by PHP installationjdolecek1-1/+16
PR: pkg/33432 by Martti Kuparinen XXX PEAR should be moved to separate package
2006-05-06Update lang/php5 to 5.1.4.jdolecek8-146/+22
Some of the key changes include: * Disallow certain characters in session names. * Fixed a buffer overflow inside the wordwrap() function. * Prevent jumps to parent directory via the 2nd parameter of the tempnam() function. * Enforce safe_mode for the source parameter of the copy() function. * Fixed cross-site scripting inside the phpinfo() function. * Fixed offset/length parameter validation inside the substr_compare() function. * Fixed a heap corruption inside the session extension. * Fixed a bug that would allow variable to survive unset(). * Fixed a number of crashes in the DOM, SOAP and PDO extensions. * Upgraded bundled PCRE library to version 6.6 * The use of the var keyword to declare properties no longer raises a deprecation E_STRICT. * FastCGI interface was completely reimplemented. * Multitude of improvements to the SPL, SimpleXML, GD, CURL and Reflection extensions. * Over 120 various bug fixes. See release annoucement on: http://www.php.net/release_5_1_3.php And ChangeLog: http://www.php.net/ChangeLog-5.php#5.1.3
2006-04-22do not require -I${PREFIX}/include/php/ext/date/lib when buildingjdolecek2-1/+15
extension using php_date.h problem reported upstream as PHP Bug 37163
2006-04-22patch-as as renamed to patch-at before commit, follow renamejdolecek1-2/+2
also here
2006-04-22add patch to actually compile the contents of PHP WDDX module; beforejdolecek2-1/+13
it produced empty *.so and the module couldn't be actually used
2006-04-14The actual patches for PHP4/5.cube3-0/+119
2006-04-14PHP4/5 security changes... They're not critical issues; secunia classescube3-4/+8
them between "not critical" and "less critical". Fix CVE-2006-0996, CVE-2006-1494, CVE-2006-1608, CVE-2006-1490. See: http://secunia.com/advisories/19383/ http://secunia.com/advisories/19599/ Patches were extracted from CVS. I had to translate the one for CVE-2006-1608 on php4 because it has not made its way to the php4.4 branch (I don't know why; I can confirm it fixes the issue). While here, add PATCHDIR to the list of variables php5's Makefile.php defines. That way, ap-php gets patched too...
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-02-17Install bin/pear with correct file permissionsadam2-6/+6
2006-02-06add fix to build php-xmlrpc and php5-dom successfully with 5.1.2jdolecek1-1/+4
2006-02-06Updated lang/php5 to 5.1.2martti9-37/+55
* HTTP Response Splitting has been addressed in ext/session and in the header() function. * Fixed format string vulnerability in ext/mysqli. * Fixed possible cross-site scripting problems in certain error conditions. * Hash & XMLWriter extensions added and enabled by default. * Upgraded OCI8 extension. * Over 85 various bug fixes. (I haven't heard anything from the MAINTAINER but since this works fine on my servers and as this fixes security issues I checked in this)
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-4/+4
2006-02-02Added two missing files to the PLIST. Bumped PKGREVISION.rillig2-3/+5
2006-01-04Use PKGMANDIR instead of "man".reed1-2/+2
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-06patch php.ini-dist and php.ini-recommended to comment out extension_dirjdolecek4-3/+54
and to uncomment and explicitly set upload_tmp_dir, so that this works out of box (patches adapted from www/php4) pointed out by Martti Kuparinen on tech-pkg@
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-29 10:35:53 +0000