Subject: CVS commit: pkgsrc/lang/php5
From: Adrian Portelli
Date: 2007-11-23 14:20:01
Message id: 20071123132001.76F4D21507@cvs.netbsd.org

Log Message:
Update to 5.2.5

* Security Enhancements and Fixes in PHP 5.2.5:
Fixed dl() to only accept filenames. Reported by Laurent Gaffie.
Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887). Reported by \ 
Laurent Gaffie.
Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences. \ 
Reported by Rasmus Lerdorf
Fixed possible triggering of buffer overflows inside glibc implementations of \ 
the fnmatch(), setlocale() and glob() functions. Reported by Laurent Gaffie.
Fixed "mail.force_extra_parameters" php.ini directive not to be \ 
modifiable in .htaccess due to the security implications. Reported by \ 
SecurityReason.
Fixed bug 42869 (automatic session id insertion adds sessions id to non-local forms).
Fixed bug 41561 (Values set with php_admin_* in httpd.conf can be overwritten \ 
with ini_set()).

* Key enhancements in PHP 5.2.5 include:
Upgraded PCRE to version 7.3
Updated timezone database to version 2007.9
Added ability to control memory consumption between request using \ 
ZEND_MM_COMPACT environment variable.
Improved speed of array_intersect_key(), array_intersect_assoc(), \ 
array_uintersect_assoc(), array_diff_key(), array_diff_assoc() and \ 
array_udiff_assoc() functions
Fixed bug 43139 (PDO ignores ATTR_DEFAULT_FETCH_MODE in some cases with fetchAll())
Fixed bug 42785 (json_encode() formats doubles according to locale rather then \ 
following standard syntax)
Fixed bug 42549 (ext/mysql failed to compile with libmysql 3.23)
Over 60 bug fixes.

For all the details see:
	http://www.php.net/ChangeLog-5.php#5.2.5

Files:
RevisionActionfile
1.62modifypkgsrc/lang/php5/Makefile
1.28modifypkgsrc/lang/php5/Makefile.common
1.50modifypkgsrc/lang/php5/distinfo
1.5removepkgsrc/lang/php5/patches/patch-ao
1.3removepkgsrc/lang/php5/patches/patch-ar