# changelog

author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.6-4.el5
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)
  - add security fix for CVE-2006-5465 (#216114)


author: Joe Orton <jorton@redhat.com> 5.1.6-6.el5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-16.el5
changelog:
  - add dbase extension in -common (#161639)
  - add /usr/share/php to builtin include_path (#238455)
  - ext/ldap: enable ldap_sasl_bind (#336221)
  - ext/libxml: reset stream context (#298031)


author: Joe Orton <jorton@redhat.com> 5.1.6-22.el5
changelog:
  - fix possible crash in metaphone() (#446183)
  - imap: link in AUTH=PLAIN authenticator (#447983)
  - Zend: fix class name case in error messages (#446180)
  - move gd_README from -common to -gd (#443812)
  - pdo: fix possible crash in error path (#429693)
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445924)
  - date: fix handling of relative days in strtotime (#444419)
  - date: fix test suite failure with current tzdata (#454863)
  - Zend: fix behaviour of constructors during destructors (#456313)
  - pdo_mysql: detect stale db connections (#450880)


author: Joe Orton <jorton@redhat.com> 5.1.6-20.el5_2.1
changelog:
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445923)


author: Joe Orton <jorton@redhat.com> - 5.3.3-2
changelog:
  - add php-$subpkg = V-R provides (#717158)
  - add security fixes for CVE-2010-3710, CVE-2010-4156, CVE-2010-4645 (#670464)
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1471,
    CVE-2011-1938, CVE-2011-2202 (#740734)
  - fix negative keys with var_export (#700724)


author: Joe Orton <jorton@redhat.com> - 5.3.3-9
changelog:
  - add security fixes for CVE-2011-4153, CVE-2012-0057, CVE-2012-0789,
    CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Joe Orton <jorton@redhat.com> - 5.1.6-29
changelog:
  - odbc: don't re-enter unixODBC during unclean shutdown (#594813)
  - update description (Lana Brindley, #572359)
  - gd: support additional PNG type (#548142)
  - date: allow 64-bit times on 64-bit platforms (#607453)
  - pdo_pgsql: fix unset of prepared stmt (#611662)
  - fix negative keys with var_export (#695251)
  - imap: support disabling authenticators (#552436)


author: Joe Orton <jorton@redhat.com> - 5.1.6-30
changelog:
  - add security fixes for CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, 
    CVE-2011-1469, CVE-2011-2202 (#768025)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-3870 CVE-2010-3709 (#650877)
  - provide php-devel from -devel (#642701)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1.2
changelog:
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.2-2
changelog:
  - add LGPLv2{,+} to License; ship text in -bcmath, -mbstring
  - apply phar patch correctly
  - fix permissions on sources, README.namespaces
  - drop EXTENSIONS from %doc
  - fix Provides for php-cli
  - drop inappropriate/obsolete Obsoletes


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.el5
changelog:
  - add build fix for mysqli, pdo_mysql on some biarch systems (#491050)
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541598)
  - add security fixes for CVE-2008-3658, CVE-2008-5624, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814 (#487370)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.1.el5
changelog:
  - increase default memory_limit to 128M; mark php.ini noreplace (#517604)
  - php_stream_filter_api.h: fix trailing comma in enum (#530824)
  - soap: fix empty tag for NULL variables (#511175)
  - soap: fix refcounting bug in SoapClient::__setSoapHeaders (#505355)
  - soap: fix partial request with minOccurs=0 in XSD (#500383)
  - don't link odbc.so directly against -lodbcsql (#483690)
  - fix possible integer overflow in substr_compare (#469807)
  - fix possible integer overflow in substr_count (#470971)
  - fix move_uploaded_file to respect the umask (#498031)
  - mbstring: fix possible crash in mb_detect_encoding() (#486651)
  - add experimental ZTS build (#484058)


author: Joe Orton <jorton@redhat.com> - 5.1.6-27.1
changelog:
  - add security fixes for CVE-2010-1917, CVE-2010-3065, CVE-2010-2531,
    CVE-2010-1128, CVE-2010-0397 (#626735)


author: Joe Orton <jorton@redhat.com> - 5.1.6-28
changelog:
  - add security fixes for CVE-2009-5016, CVE-2010-1917, CVE-2010-3065, 
    CVE-2010-2531, CVE-2010-1128, CVE-2010-0397, CVE-2010-3870 (#626736)


author: Joe Orton <jorton@redhat.com> 5.1.6-23.1.el5
changelog:
  - add security fixes for CVE-2008-3658, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring
    func_overload issue (#487369)


author: Joe Orton <jorton@redhat.com> - 5.1.6-24.3
changelog:
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541597)
  - add build fix for mysqli on some biarch systems (#543469)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.1.6-27.4
changelog:
  - add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
    CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Joe Orton <jorton@redhat.com> 1:1.4.9-5
changelog:
  - Require php-devel (#482974)
  - increase pecl/pear memory_limit (#460072)
  - fix PEAR.php with E_STRICT (#461142)


