summaryrefslogtreecommitdiff
path: root/www/php4
AgeCommit message (Collapse)AuthorFilesLines
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-07LIBTOOL_OVERRIDE generally doesn't need to be specified anymore... justjlam1-2/+1
set OVERRIDE_DIRDEPTH to find any libtool scripts deeper in the WRKSRC tree unless they're named something other than "libtool". SHLIBTOOL_OVERRIDE generally doesn't need to be specified either -- just define it to the empty list and shlibtool-override will look for libtool scripts.
2006-06-06Note in the MESSAGE file the path to the PHP CGI binary to answer an FAQ.jlam2-8/+13
2006-06-05This package needs lex to build. Add it to USE_TOOLS.minskim1-2/+2
2006-05-11Libtoolize link commands on Darwin. Previously, pakcages providingminskim3-3/+19
php-* modules failed on Darwin because gcc was used to link them. Thanks to John Klos for testing. Bump PKGREVISION.
2006-04-22add patch to actually compile the contents of PHP WDDX module; beforejdolecek2-1/+13
it produced empty *.so and the module couldn't be actually used
2006-04-14The actual patches for PHP4/5.cube3-0/+111
2006-04-14PHP4/5 security changes... They're not critical issues; secunia classescube2-2/+6
them between "not critical" and "less critical". Fix CVE-2006-0996, CVE-2006-1494, CVE-2006-1608, CVE-2006-1490. See: http://secunia.com/advisories/19383/ http://secunia.com/advisories/19599/ Patches were extracted from CVS. I had to translate the one for CVE-2006-1608 on php4 because it has not made its way to the php4.4 branch (I don't know why; I can confirm it fixes the issue). While here, add PATCHDIR to the list of variables php5's Makefile.php defines. That way, ap-php gets patched too...
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-06Increase memory limit when installing PEAR packages. This allows thecube2-5/+9
installation to go through on NetBSD/sparc64 (well, at least mine). Failure reported by Joel Carnat.
2006-03-03Update to version 4.4.2. Ok'd by jdolecek@.cube9-246/+313
This is a bug fix release, which addresses some security problems too. The major points that this release corrects are: * Prevent header injection by limiting each header to a single line. * Possible XSS inside error reporting functionality. * Missing safe_mode/open_basedir checks into cURL extension. * Apache 2 regression with sub-request handling on non-Linux systems. * key() and current() regression related to references. This release also fixes about 30 other defects.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-4/+4
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-2/+2
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig3-7/+7
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-21Allow choosing of CGI or FastCGI as SAPI for the PHP interpreter.joerg1-1/+11
This is done via an option group, default is CGI. Note that the FastCGI interpreter can still be used for normal CGI, but there might be security issues involved in doing so.
2005-11-11PKGBASE is defined too late to be used in PKG_OPTIONS_VAR.rillig1-2/+4
2005-11-08php 4.4.1 has a bug which cause squirrelmail's sort function to misbehave:bouyer3-3/+19
(endless loop): http://bugs.php.net/bug.php?id=35067 Pull in a patch from the php CVS repository to fix this, as suggested a squirrelmail mailing list: http://cvs.php.net/diff.php/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.3&r2=1.543.2.51.2.4&ty=u OK'd by Jaromir Dolecek, tested on apache-1 and apache-2 servers. Bump pkgrevision.
2005-11-05Replaced ${PKGNAME:C...} with the equivalent ${PKGBASE}.rillig1-2/+2
2005-11-04Use --with-openssl=${BUILDLINK_PREFIX.openssl} to specify real pathtv1-2/+2
so that configure won't try to run the (possibly not installed) pkg-config.
2005-11-02Remove obsolete file "include/php/main/config.nw.h" from package list,tron2-3/+3
bump revision.
2005-11-02Remove "XML_RPC-1.4.0.tgz". It is part of PHP 4.4.1 and therefore notron1-5/+1
longer downloaded manually.
2005-11-01Update php to 4.4.1. Besides incorporating XML_RPC-1.4.0 and fopen wrappersjdolecek5-40/+8
security fix, this fixes serious security problems regarding overwriting of the GLOBALS array. All users of PHP 4.3 and 4.4 sare encouradged to update to this version. The --with-regex=system bug with re_magic has been fixed too, so re-enabling use of --with-regex=system for all operating systems again
2005-10-23php regex is also necessary on Linux; pointed out by Ondrej Tumajdolecek1-2/+2
in private e-mail
2005-10-19Bring back the "ssl" option so that the builder may have the *option* totv1-5/+10
turn it off. It's still on by default (in PKG_SUGGESTED_OPTIONS), so no PKGREVISION bump required.
2005-10-16Fix bug in mbstring extension function mb_encode_mimeheader(), whichjdolecek2-1/+15
misinterpreted some Japanese characters as ASCII. PR: 31223 by Takahiro Kambe
2005-10-16use PHP-provided regex on Solaris, PHP doesn't build with system regexjdolecek1-1/+9
there PR: 31047 by Gilles Dauphin
2005-10-08make it possible to switch the IPv6 support on/off via a package option,jdolecek1-2/+11
similarily how this is done in lang/php5/Makefile.php; default depends in USE_INET6 setting, i.e. enabled iff OS supports it
2005-10-08openssl is included unconditionallyjdolecek1-8/+4
2005-10-08fix pluraljdolecek1-2/+2
2005-10-08Unfortunately PHP has several openssl hooks, which are only enabledjdolecek3-4/+8
when the base PHP is compiled with openssl extension (e.g. ssl://, tls:// stream support, and couple others). These don't work when SSL support is loaded via extension. For this reason, make openssl extension unconditionally built-in into the main PHP package, and g/c security/php-openssl.
2005-10-07Add a fix to LDAP extension build to properly detect LDAP capabilities,jdolecek2-1/+14
such as TLS support. Patch provided by Stoned Elipot in private e-mail.
2005-10-05Add patch from Debian bug report 323585 to fix CAN-2005-3054.tron3-2/+19
2005-09-10put back XML_RPC upgrade - the fixed one is 1._4_.0, not 1.3.1jdolecek2-2/+15
2005-09-10PHP 4.4.0 already comes with XML_RPC 1.3.1, so it's not necessary to updatejdolecek2-15/+2
it separately
2005-09-04Move some options that only apply to the PHP CGI package from Makefile.phpjlam2-4/+5
(shared with ap-php) into the php package Makefile.
2005-08-18Use "${GZCAT}" instead of "{GZIP_CMD} -cd".tron1-3/+3
2005-08-17Use per distribution file site list for "XML_RPC-1.4.0.tgz".tron1-7/+7
2005-08-17Define "USE_TOOLS" to make "post-extract" target work on arbitrarytron1-1/+3
configurations. Problem pointed out by Adrian Portelli in private e-mail.
2005-08-17Update "php4" package to version 4.4.0. The update fixes a large numbertron5-12/+30
of bugs discovered since the 4.3.11 release which could e.g. lead to memory corruption. Furthermore integrate version 1.4.0 of PEAR XML_RPC which contains a fix for the "PEAR XML_RPC Remote PHP Code Injection Vulnerability" security problem reported by the Hardened-PHP Project.
2005-06-12g/c the UPGRADE_PKG code - it's no longer used, and the empty 'for'jdolecek1-10/+1
list causes problems with some (e.g. Irix) shells
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-6/+2
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-05-07do not define MASTER_SITES and EXTRACT_SUFX if PECL_VERSION is set,jdolecek1-1/+4
so that lang/php/ext.php need not use = assignment and extensions would be able to use different setting
2005-04-21Apply cleanly after update to 4.3.11salo2-7/+7
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-04-11doesn't appear to be needed anymorejdolecek1-41/+0
2005-04-11Update php4 to 4.3.11.jdolecek7-176/+96
This is a maintenance release that in addition to over 70 non-critical bug fixes addresses several security issues inside the exif and fbsql extensions as well as the unserialize(), swf_definepoly() and getimagesize() functions. All Users of PHP are strongly encouraged to upgrade to this release. Bugfix release * Crash in bzopen() if supplied path to non-existent file. * DOM crashing when attribute appended to Document. * unserialize() float problem on non-English locales. * Crash in msg_send() when non-string is stored without being serialized. * Possible infinite loop in imap_mail_compose(). * Fixed crash in chunk_split(), when chunklen > strlen. * session_set_save_handler crashes PHP when supplied non-existent object ref. * Memory leak in zend_language_scanner.c. * Compile failures of zend_strtod.c. * Fixed crash in overloaded objects & overload() function. * cURL functions bypass open_basedir. PHP4 also doesn't bundle PEAR Net_Socket and Net_SMTP anymore now.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-05 17:29:24 +0000