# changelog

author: Remi Collet <remi@remirepo.net> 5.4.45-5
changelog:
  - Fix #71498: Out-of-Bound Read in phar_parse_zipfile()
  - Fix #71587: Use-After-Free / Double-Free in WDDX Deserialize


author: Remi Collet <remi@fedoraproject.org> 5.4.45-7
changelog:
  - Fix #71860: Require valid paths for phar filenames
    CVE-2016-4072
  - Fix #71906: AddressSanitizer: negative-size-param in mbfl_strcut
    CVE-2016-4073
  - Fix #71798: Integer Overflow in php_raw_url_encode
    CVE-2016-4070
  - Fix #71704: php_snmp_error() Format String Vulnerability
    CVE-2016-4071
  - Fix #71527: Buffer over-write in finfo_open with malformed magic file
    CVE-2015-8865


author: Remi Collet <remi@fedoraproject.org> 5.4.45-8
changelog:
  - Fix #64938: libxml_disable_entity_loader setting is shared between threads
    CVE-2015-8866
  - Fix #71912: libgd signedness vulnerability
    CVE-2016-3074
  - Fix #72061: Out-of-bounds reads in zif_grapheme_stripos with negative offset
    CVE-2016-4540 CVE-2016-4541
  - Fix #72093: bcpowmod accepts negative scale and corrupts _one_ definition
    CVE-2016-4537 CVE-2016-4538
  - Fix #72094: Out of bounds heap read access in exif header processing
    CVE-2016-4542 CVE-2016-4543 CVE-2016-4544
  - Fix #72099: xml_parse_into_struct segmentation fault
    CVE-2016-4539


author: Remi Collet <remi@fedoraproject.org> 5.4.45-9
changelog:
  - Fix #71331: Uninitialized pointer in phar_make_dirstream
    CVE-2016-4343
  - Fix #72114: int/size_t confusion in fread
    CVE-2016-5096
  - Add check for string overflow to all string add operations
  - Fix #72135: don't create strings with lengths outside int range
    CVE-2016-5094
  - Fix #72241: get_icu_value_internal out-of-bounds read
    CVE-2016-5093


author: Remi Collet <remi@fedoraproject.org> 5.4.45-10
changelog:
  - Fix #66387: Stack overflow with imagefilltoborder
  - Fix #72340: Double Free Courruption in wddx_deserialize
    CVE-2016-5772
  - Fix #72275: don't allow smart_str to overflow int
  - Fix #72400: prevent signed int overflows for string lengths
  - Fix #72403: prevent signed int overflows for string lengths
  - Fix #72268: Integer Overflow in nl2br(). (Stas)
  - Fix #72339: Integer Overflow in _gd2GetHeader() resulting in heap overflow
    CVE-2016-5766
  - Fix #72298: pass2_no_dither out-of-bounds access
  - Fix #72402: _php_mb_regex_ereg_replace_exec - double free
    CVE-2016-5768
  - Fix #72433: SPL use After Free Vulnerability in PHP's GC
    CVE-2016-5771
  - Fix #72434: ZipArchive class use After Free Vulnerability in PHP's GC
    CVE-2016-5773
  - Fix #72455: Heap Overflow due to integer overflows
    CVE-2016-5769
  - Fix #72446: Integer Overflow in gdImagePaletteToTrueColor()
    CVE-2016-5767


author: Remi Collet <remi@fedoraproject.org> 5.4.45-11
changelog:
  - Fix #70480: php_url_parse_ex() buffer overflow read
    CVE-2016-6288
  - Fix #69975: PHP segfaults when accessing nvarchar(max) defined columns
  - Fix #72479: Use After Free Vulnerability in SNMP with GC and unserialize()
    CVE-2016-6295
  - Fix #72573: HTTP_PROXY is improperly trusted by some PHP libraries
    CVE-2016-5385
  - Fix #72513: buffer overflow vulnerability in virtual_file_ex
    CVE-2016-6289
  - Fix #72520: buffer overflow vulnerability in php_stream_zip_opener
    CVE-2016-6297
  - Fix #72533: locale_accept_from_http out-of-bounds access
    CVE-2016-6294
  - Fix #72562: Use After Free in unserialize() with Unexpected Session
    Deserialization CVE-2016-6290
  - Fix #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE
    CVE-2016-6291
  - Fix #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c
    CVE-2016-6296
  - Partial fix #72613: do not treat negative returns from bz2 as size_t
  - Fix #72618: NULL Pointer Dereference in exif_process_user_comment
    CVE-2016-6292
  - Fix #72519: possible OOB using imagegif


author: Remi Collet <remi@fedoraproject.org> 5.4.45-12
changelog:
  - fix #72627: Memory Leakage In exif_process_IFD_in_TIFF
    CVE-2016-7128
  - fix #72926: Uninitialized Thumbail Data Leads To Memory Leakage
    in exif_process_IFD_in_TIFF
  - fix #73035: Out of bound when verify signature of tar phar
  - fix #72928: Out of bound when verify signature of zip phar
    CVE-2016-7414
  - fix #72735 regression in exif maker note parser


author: Remi Collet <remi@fedoraproject.org> 7.1.0-0.11.RC4
changelog:
  - Update to 7.1.0RC4
  - update tzdata patch to v14, improve check for valid tz file
  - oci8 version is now 2.1.3


author: Remi Collet <remi@fedoraproject.org> 7.1.0-1
changelog:
  - Update to 7.1.0 - http://www.php.net/releases/7_1_0.php
  - use bundled pcre library 8.38 on EL-7
  - disable pcre.jit everywhere as it raise AVC #1398474
  - sync provided configuration with upstream production defaults


author: Remi Collet <remi@remirepo.net> - 5.1.0-1
changelog:
  - update to 5.1.0 (Feb 5, 2016)
  - add new options in configuration file
  - remove README.txt, add USER-GUIDE.pdf
  - add missing LICENSE file from previous version


author: Remi Collet <remi@remirepo.net> 5.5.38-2
changelog:
  - fix #72716: initialize buffer before read (ftp)
  - fix #72663: destroy broken object when unserializing
    CVE-2016-7124
  - fix #72681: consume data even if we're not storing them
    CVE-2016-7125
  - fix #72708: php_snmp_parse_oid integer overflow in memory allocation
  - fix #72749: wddx_deserialize allows illegal memory access
    CVE-2016-7129
  - fix #70436: Use After Free Vulnerability in unserialize()
    CVE-2016-7129
  - fix #72771: ftps:// opendir wrapper is vulnerable to protocol
    downgrade attack
  - fix #72750: wddx_deserialize null dereference
    CVE-2016-7130
  - fix #72627: Memory Leakage In exif_process_IFD_in_TIFF
    CVE-2016-7128
  - fix #72697: select_colors write out-of-bounds
    CVE-2016-7126
  - fix #72730: imagegammacorrect allows arbitrary write access
    CVE-2016-7127
  - fix #72790: wddx_deserialize null dereference with invalid xml
    CVE-2016-7131
  - fix #72799: wddx_deserialize null dereference in php_wddx_pop_element
    CVE-2016-7132
  - fix #72807: do not produce strings with negative length
  - fix #72836: integer overflow in base64_decode caused heap corruption
  - fix #72837: integer overflow in bzdecompress caused heap corruption
  - fix #72838: Integer overflow lead to heap corruption in sql_regcase
  - fix #72848: integer overflow in quoted_printable_encode caused
    heap corruption
  - fix #72849: integer overflow in urlencode
  - fix #72850: integer overflow in uuencode


author: Remi Collet <remi@remirepo.net> 5.5.38-3
changelog:
  - fix #72910: Out of bounds heap read in mbc_to_code()
  - fix #72926: Uninitialized Thumbail Data Leads To Memory Leakage
    in exif_process_IFD_in_TIFF
  - fix #72928: Out of bound when verify signature of zip phar
    CVE-2016-7414
  - fix #73007: add locale length check
    CVE-2016-7416
  - fix #72860: wddx_deserialize use-after-free
    CVE-2016-7413
  - fix #73029: Missing type check when unserializing SplArray
    CVE-2016-7417
  - fix #73052: Memory Corruption in During Deserialized-object Destruction
    CVE-2016-7411
  - fix #73035: Out of bound when verify signature of tar phar
  - fix #73065: Out-Of-Bounds Read in php_wddx_push_element of wddx.c
    CVE-2016-7418


author: Remi Collet <remi@remirepo.net> 5.5.38-4
changelog:
  - fix #73189: Memcpy negative size parameter php_resolve_path
  - fix #72581: previous property undefined in Exception after deserialization
  - fix #73147: Use After Free in unserialize
  - fix #73190: memcpy negative parameter _bc_new_num_ex
  - fix #73150: missing NULL check in dom_document_save_html
  - fix #73284: heap overflow in php_ereg_replace function
  - fix #73073: CachingIterator null dereference when convert to string
  - fix #73218: add mitigation for ICU int overflow
  - fix #73208: integer overflow in imap_8bit caused heap corruption
  - fix #73082: string length overflow in mb_encode_* function
  - fix #73174: heap overflow in php_pcre_replace_impl
  - fix #73275: crash in openssl_encrypt function
  - fix #73275: crash in openssl_encrypt function
  - fix #73293: NULL pointer dereference in SimpleXMLElement::asXML
  - fix #73240: Write out of bounds at number_format
  - fix #73017: memory corruption in wordwrap function


author: Remi Collet <remi@remirepo.net> 5.5.38-5
changelog:
  - fix #73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  - fix #73144: Use-after-free in ArrayObject Deserialization
  - fix #73356: crash in bzcompress function
  - fix #73331: NULL Pointer Deref. in WDDX Packet Deserialization with PDORow


author: Remi Collet <remi@fedoraproject.org> 7.0.13-0.1.RC1
changelog:
  - Update to 7.0.13RC1
  - oci8 version is now 2.1.3
  - update tzdata patch to v14, improve check for valid tz file


author: Remi Collet <remi@fedoraproject.org> 7.0.14-1
changelog:
  - Update to 7.0.14 - http://www.php.net/releases/7_0_14.php
  - disable pcre.jit everywhere as it raise AVC #1398474


author: Remi Collet <remi@fedoraproject.org> 1:1.10.1-3
changelog:
  - use file triggers for pecl extensions (un)registration
  - define %pecl_install and %pecl_uninstall as noop macro


author: Remi Collet <remi@fedoraproject.org> 1:1.10.1-7
changelog:
  - fix https connection via a proxy
    patch from https://github.com/pear/pear-core/pull/51
  - silent the new scriplets (F24+)


author: Remi Collet <rcollet@redhat.com> 1.0-1
changelog:
  - initial packaging from php55 from rhscl 1.1
  - install macro in /usr/lib/rpm/macros.d
  - each package requires runtime (for license)


author: Remi Collet <remi@fedoraproject.org> 2.0-4
changelog:
  - static environement module file instead of
    generated one, because of https://bugzilla.redhat.com/1197321


author: Remi Collet <remi@remirepo.net> 5.5.38-4
changelog:
  - fix #73189: Memcpy negative size parameter php_resolve_path
  - fix #72581: previous property undefined in Exception after deserialization
  - fix #73147: Use After Free in unserialize
    CVE-2016-9137
  - fix #73190: memcpy negative parameter _bc_new_num_ex
  - fix #73150: missing NULL check in dom_document_save_html
  - fix #73284: heap overflow in php_ereg_replace function
  - fix #73073: CachingIterator null dereference when convert to string
  - fix #73218: add mitigation for ICU int overflow
  - fix #73208: integer overflow in imap_8bit caused heap corruption
  - fix #73082: string length overflow in mb_encode_* function
  - fix #73174: heap overflow in php_pcre_replace_impl
  - fix #73275: crash in openssl_encrypt function
  - fix #73293: NULL pointer dereference in SimpleXMLElement::asXML
  - fix #73240: Write out of bounds at number_format
  - fix #73017: memory corruption in wordwrap function


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-2
changelog:
  - move libraries in new libs sub packages
  - add provides for bundled(bobjenkins-hash) #1041351
  - apply libpthread workaround #1037707
  - spec cleanups


author: Remi Collet <remi@fedoraproject.org> - 1.2.2-0.1.20151217git2b7c703
changelog:
  - update to 1.2.2dev for PHP 7
  - ignore test results, 4 failed tests: igbinary_009.phpt, igbinary_014.phpt
    igbinary_026.phpt and igbinary_unserialize_v1_compatible.phpt
  - session support not yet available


author: Remi Collet <remi@fedoraproject.org> - 1.0.1-1
changelog:
  - update to 1.0.1
  - soname bump from .2 to .4
  - drop ziptorrent
  - create "tools" sub package
  - rename to libzip-last to allow parallel installation


author: Remi Collet <remi@fedoraproject.org> 1.0-0.3
changelog:
  - enable nfsmountable (not to be nfs montable)
  - move configuration dir to /etc/opt
  - move localstate dir to /var/opt
  - fix incorrect selinux contexts


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Remi Collet <remi@fedoraproject.org> - 2.0.21-4
changelog:
  - merge changes from rawhide:
    - Add missing directory /usr/include/event2
    - Correct summary and description of -devel and -doc packages
  - re-add doc sub-package


author: Remi Collet <remi@fedoraproject.org> - 3.0.8-8
changelog:
  - adapt for F24
  - drop runtime dependency on pear, new scriptlets
  - fix license management
  - don't install/register tests


author: William Horka <whorka@hmdc.harvard.edu> 2.4.6-2
changelog:
  - Add selinux module
  - Remove unused log dir and add IPC socket dir
  - Add FastCgiWrapper, FastCgiConfig, and FastCgiWrapper to fastcgi.conf
  - Set httpd User and Group in fastcgi.conf so mod_fastcgi.so will load


