notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
All times are UTC
Ukraine
non port: lang/php52/distinfo
SVNWeb

Number of commits found: 19

Sat, 31 Aug 2013
[ 21:30 rm search for other commits by this committer ] Original commit   Revision:325833
- update backports patch to 20130717
- extend deprecation period for 6 months
- bump PORTREVISION

Changes:
- CVE-2013-4113, exif_read_data fix, compilation warning, libxml2 >2.9 support
- timezonedb 2013.4 (2013d)

PR:		181449
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	Alex Keda <admin@lissyara.su>
Tue, 21 May 2013
[ 08:17 miwi search for other commits by this committer ] Original commit   Revision:318657
- Update backports patch to 20121114
- Bump PORTREVISION

security fixes:
- CVE-2013-1635
- CVE-2013-1643

PR:		177203
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	maintainer
Sun, 25 Nov 2012
[ 15:42 flo search for other commits by this committer ] Original commit   Revision:307747
- Update backports patch to 20121114
- Bump PORTREVISION

Changes:
- CVE-2006-7243
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow
context-dependent attackers to bypass intended access restrictions by placing a
safe file extension after this character, as demonstrated by .php\0.jpg at the
end of the argument to the file_exists function

Secuity 3761df02-0f9c-11e0-becc-0022156e8794 fixed by check in fopen functions
for strlen(filename) != filename_len

- CVE-2012-4388
The sapi_header_op function in main/SAPI.c does not properly determine a pointer
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 20 Sep 2012
[ 03:02 bdrewery search for other commits by this committer ] Original commit   Revision:304559
- Update php52 backports patch to 20120911
- Add and update relevant vuxml entries

Changes:
  - CVE-2011-1398 - The sapi_header_op function in main/SAPI.c in PHP
    before 5.3.11 does not properly handle %0D sequences
  - CVE-2012-0789 - Memory leak in the timezone functionality in PHP
    before 5.3.9 allows remote attackers to cause a denial of service
    (memory consumption) by triggering many strtotime function calls,
    which are not properly handled by the php_date_parse_tzfile cache.
  - CVE-2012-3365 - The SQLite functionality in PHP before 5.3.15 allows
    remote attackers to bypass the open_basedir protection mechanism via
     unspecified vectors
  - Timezone database updated to version 2012.5 (2012e) (from 2011.13 (2011m))
  - Minor improvements (CVE-2012-2688, compilation issues with old GCC)

PR:		ports/171583
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	Alex Keda <admin@lissyara.su> (maintainer)
Mon, 23 Jul 2012
[ 04:14 rm search for other commits by this committer ] Original commit 
- update backports patch to 20120721
- bump PORTREVISION

PR:		170063
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:	Alex Keda <admin at lissyara dot su> (maintainer)
Sat, 30 Jun 2012
[ 23:00 rm search for other commits by this committer ] Original commit 
- update backports patch to 20120526
- bump PORTREVISION

PR:             169272
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:    Alex Keda <admin at lissyara dot su> (maintainer)
Sat, 5 May 2012
[ 15:21 rm search for other commits by this committer ] Original commit 
Update distinfo that's was missed for some reason.
Wed, 18 Jan 2012
[ 17:27 lwhsu search for other commits by this committer ] Original commit 
- CVE-2011-4566 fix in 20120117 security patchset

PR:             ports/164286
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Security:       d3921810-3c80-11e1-97e8-00215c6a37bb
Mon, 2 Jan 2012
[ 18:26 rm search for other commits by this committer ] Original commit 
Update to lastest security patchset 20120103: added max_input_vars directive
(default "1000") to prevent attacks based on hash collisions (from PHP 5.4 RC4)

PR:             163782
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:    maintainer
Tue, 1 Nov 2011
[ 15:58 miwi search for other commits by this committer ] Original commit 
- Update to lastest security patchset: 20111030
- Move removal date to 2012-03-01
- Bump PORTREVISION

PR:             162165
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:    maintainer
Thu, 29 Sep 2011
[ 17:53 delphij search for other commits by this committer ] Original commit 
 - security fixes for CVE-2011-2202, CVE-2011-1938, CVE-2011-1148,
   CVE-2011-0708, CVE-2011-1092, CVE-2011-0421 vulnerabilities
 - option BACKPORTS in port config for enable port patches (enabled
   by default)
 - bump PORTREVISION

Submitted by:   Svyatoslav Lempert <svyatoslav.lempert gmail.com>
PR:             ports/160805
Approved by:    maintainer
Sun, 9 Jan 2011
[ 18:56 mm search for other commits by this committer ] Original commit 
Update to 5.2.17

Approved by:    Alex Keda <admin@lissyara.su> (maintainer, private e-mail)
Fri, 31 Dec 2010
[ 12:56 mm search for other commits by this committer ] Original commit 
- Update suhosin patch
- Portrevision bump not required

PR:             ports/153579
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Fri, 17 Dec 2010
[ 11:30 mm search for other commits by this committer ] Original commit 
- Update to 5.2.16

PR:             ports/153246
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Fri, 10 Dec 2010
[ 12:38 mm search for other commits by this committer ] Original commit 
- Update to 5.2.15

PR:             ports/152981
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Mon, 26 Jul 2010
[ 08:56 mm search for other commits by this committer ] Original commit 
Update php52 to 5.2.14

PR:             ports/148951
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Wed, 16 Jun 2010
[ 10:12 mm search for other commits by this committer ] Original commit 
- Add optional support for PHP-FPM (FastCGI process manager)
- Add sample configuration file and rc script for PHP-FPM

PR:             ports/147688
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Tue, 27 Apr 2010
[ 05:46 dinoex search for other commits by this committer ] Original commit 
- update to 5.2.13
Sumbitted by:   Alex Keda (maintainer)
Fri, 23 Apr 2010
[ 15:03 dinoex search for other commits by this committer ] Original commit  (Only the first 10 of 23 ports in this commit are shown above. View all ports for this commit)
PHP, which stands for "PHP: Hypertext Preprocessor" is a widely-used Open
Source general-purpose scripting language that is especially suited for
Web development and can be embedded into HTML.  Its syntax draws upon C,
Java, and Perl, and is easy to learn.  The main goal of the language is to
allow web developers to write dynamically generated webpages quickly, but
you can do much more with PHP.

WWW: http://www.php.net/
PR:             145772
Submitted by:   Alex Keda

Number of commits found: 19