Next | Query returned 18 messages, browsing 11 to 20 | previous

History of commit frequency

CVS Commit History:


   2012-10-23 20:17:02 by Aleksej Saushev | Files touched by this commit (368)
Log message:
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
   2012-06-17 00:34:23 by David A. Holland | Files touched by this commit (4)
Log message:
Remove 52 from PHP_VERSIONS_ACCEPTED.
   2012-06-16 04:59:48 by Takahiro Kambe | Files touched by this commit (1)
Log message:
Restrict to PHP 5.2.x and 5.3.x since there is no PHP 5.4.x officialy yet.
   2012-01-20 04:23:34 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update php-suhosin package to 0.9.33 to fix security problem.

                         SektionEins GmbH
                        www.sektioneins.de

                     -= Security  Advisory =-

     Advisory: Suhosin PHP Extension Transparent Cookie Encryption Stack
Buffer Overflow
 Release Date: 2012/01/19
Last Modified: 2012/01/19
       Author: Stefan Esser [stefan.esser[at]sektioneins.de]

  Application: Suhosin Extension <= 0.9.32.1
     Severity: A possible stack buffer overflow in Suhosin extension's
               transparent cookie encryption that can only be triggered
               in an uncommon and weakened Suhosin configuration can lead
               to arbitrary remote code execution, if the FORTIFY_SOURCE
               compile option was not used when Suhosin was compiled.
         Risk: Medium
Vendor Status: Suhosin Extension 0.9.33 was released which fixes this
vulnerability
    Reference: http://www.suhosin.org/
               https://github.com/stefanesser/suhosin
   2011-12-17 14:46:29 by OBATA Akio | Files touched by this commit (13) | Package updated
Log message:
Change default PKGNAME scheme for PECL packages.
Drop ${PHP_BASE_VARS} from PKGVERSION by default.

It used to be required to support multiple php version.
But after PHP version based ${PHP_PKG_PREFIX} was introduced,
such trick is not required anymore.
In addition to this, such version name schme invokes unwanted version bump
when base php version is bumped, plus, such version scheme is hard to
use for DEPENDS pattern.

To avoid downgrading of package using such legacy version scheme,
PECL_LEGACY_VERSION_SCHEME is introduced.
If it is defined, current version scheme is still used for currently
supported PHP version (5 and 53), but instead of ${PHP_BASE_VARS},
current fixed PHP base version in pkgsrc is used to avoid unwanted version bump
from update of PHP base package.
With newer PHP (54, or so on), new version scheme will be used if
it is defined.
This trick will not be required and should be removed after php5 and php53 will
be gone away from pkgsrc.
   2010-12-19 03:22:15 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update php-suhosin pacakge to 0.9.32.1.

2010-07-23 - 0.9.32.1

    - Fixed missing header file resulting in compile errors

2010-07-23 - 0.9.32

    - Added support for memory_limit > 2GB
    - Fixed missing header file resulting in wrong php_combined_lcg()
      prototype being used
    - Improved random number seed generation more by adding /dev/urandom juice

2010-03-28 - 0.9.31

    - Fix ZTS build of session.c
    - Increased session identifier entropy by using /dev/urandom if available

2010-03-25 - 0.9.30

    - Added line ending characters %0a and %0d to the list of
      dangerous characters handled
      by suhosin.server.encode and suhosin.server.strip
    - Fixed crash bug with PHP 5.3.x and session module (due to
      changed session globals struct)
    - Added ! protection to PHP session serializer
    - Fixed simulation mode now also affects (dis)allowed functions
    - Fixed missing return (1); in random number generator replacements
    - Fixed random number generator replacement error case behaviour
      in PHP 5.3.x
    - Fixed error case handling in function_exists() PHP 5.3.x
    - Merged changes/fixes in import_request_variables()/extract()
      from upstream PHP
    - Fixed suhosin_header_handler to be PHP 5.3.x compatible
    - Merge fixes and new features of PHP's file upload code to suhosin
   2010-03-04 16:38:53 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update php-suhosin package to 0.9.29.

2009-08-15 - 0.9.29

    - Fixing crash bugs with PHP 5.3.0 caused by unexpected NULL in
      EG(active_symbol_table)
    - Added more compatible way to retrieve ext/session globals
    - Increased default length and count limit for POST variables (for
      people not reading docu)

2009-08-14 - 0.9.28

    - Fixed crash bug with PHP 5.2.10 caused by a change in extension
      load order of ext/session
    - Fixed harmless parameter order error in a bogus memset()
    - Disable suhosin.session.cryptua by default because of Internet
      Explorer 8 "features"
    - Added suhosin.executor.include.allow_writable_files which can be
      disabled to disallow inclusion of files writable by the webserver
   2009-02-18 00:16:14 by Adrian Portelli | Files touched by this commit (3) | Imported package
Log message:
Suhosin is an advanced protection system for PHP installations. It was designed \ 
to protect servers and users from known and unknown flaws in PHP applications \ 
and the PHP core. Suhosin comes in two independent parts, that can be used \ 
separately or in combination. The first part is a small patch against the PHP \ 
core, that implements a few low-level protections against bufferoverflows or \ 
format string vulnerabilities and the second part is a powerful PHP extension \ 
that implements all the other protections. 


Next | Query returned 18 messages, browsing 11 to 20 | previous