php5-suhosin-5.2.12-0.1.1<>,K{;/=„g* iTy¿>1j6a/3Dj=%El.]? u!hΘB06}oiJmX} 9bgK*xR0c{fg,{ޡֵfɭ%]&M +xR-<,Z~t[ 8ZiNܴ?fxi`m˹-󃠑=ƺjœ7IfX$☂20zή |*M)?WP pi'h55Fc>6{?{ d  2$(48FO     > @HR\x   (8H9H: HFy_GytHy|IyXyYy\y]y^ybyczzdzezfzkzlzzzCphp5-suhosin5.2.120.1.1PHP5 Extension ModuleSuhosin is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core. Suhosin is binary compatible to normal PHP installation, which means it is compatible to 3rd party binary extension like ZendOptimizer. Authors: -------- Stefan Esser Peter Prochaska Christopher Kunz Kuphammer22openSUSE 11.1openSUSE"The PHP License, version 3.1. ..."; The PHP License, version 3.1.http://bugs.opensuse.orgDevelopment/Libraries/PHPhttp://www.php.netlinuxi586NOKupKup1661b5a97d04b76bdf000be3cc63c06bc3899d7e35d45f8d81d8da399e070672rootrootrootrootphp5-5.2.12-0.1.1.src.rpmphp-suhosinsuhosin.sophp5-suhosinJJ@@@@@@@Jphp5rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)rpmlib(PayloadIsLzma)5.2.124.0-13.0.4-14.4.2-14.4.2.3KrJ@IV@Il@Ik0I@I@I@I@H@HH|@H"@H@GOG GZ@G@GsGaG^{G8@@Fֱ@F@FōF @FF;@FF@F@F} @FnF` @F]g@FQFNFHO@FDZF=@F 10.1 as 5.2.2 installs php_pcre.h header that needs it.- fixed some new compiler warnings- upgrade to PHP 5.2.2, fixed hundreds of bugs including MOPB ones if you need the complete changes see http://www.php.net/ChangeLog-5.php#5.2.2- Upgrade suhosin extension to version 0.9.19 see http://www.hardened-php.net/suhosin/changelog.html for details- added bison to BuildRequires, removed update-desktop-files- fixed unpack() on big-endian 64bit (revert-phpbug38770.patch) - blacklist more env variables when safe_mode is on (php5-config.patch)- fix Requires of -devel package to include only what is really needed for operation of the pecl tool as well the neccesary headers to compile php extensions. - Fix MOPB 24 "PHP array_user_key_compare() Double DTOR Vulnerability" - note that fix for MOPB 23 was included in the previous patchset.- add security fixes for MOPB 20, 21 and 22. - RPM_BUILD_ROOT is never defined in %post.- fix/workaround for php5-gd problem with typo3 [#236680] - add fix for MOPB-14-2007 PHP substr_compare() Information Leak Vulnerability. - add secfix for import_request_variables() ancient problem, users of suhosin extension are not affected. - Run the test suite here- Update suhosin extension to version 0.9.18 fixing a session problem.- Update suhosin extension to version 0.9.17. see http://www.hardened-php.net/suhosin/changelog.html for details.- add t1lib support in php5-gd (10.3 and up only) - an off-by-one in str_replace may cause a crash.- PHP 5.2.1. for a full list of changes see http://www.php.net/ChangeLog-5.php#5.2.1 - add Obsoletes for extensions we dont ship anymore- fix getenv() modifing $_POST, breaks suhosin badly when register_* is On and variables orde is "GPCS" (default). - change/remove obsoleted patches- synced with BuildService * file "session_mm_apache2handler0.sem" written at boot [#229200] (php5-config.patch) * for certain functionality php5-exif requires php5-mbstring * php5-ldap requires php5-openssl * remove LDAP_DEPRECATED from CFLAGS, module already takes care of this. * patch potential HTTP_SESSION_VARS et all hijack when register_globals is On users from suhosin extension are not affected.(php5-session-rgon-hijack.patch) * on 10.2 and up php5-devel should require pcre-devel sqlite-devel sqlite2-devel * php5-devel is mostly useless without autoconf automake libtool bison make gcc. * added patches: phpbug-39350.patch oldhat-phpinputdata-secfix.patch ze2-fixes.patch filter.patch ext-lib64again.patch- fixed string comparison in xmlrpc module (strcmp.patch) - allways apply %%patch9- updated the curl module from cvs to fix build with curl-7.16 (curl-cvs-fix.patch, dropped gcc.patch)- fixed VUL-0: php session.save_path open_basedir bypass [#227569] (save_path-secfix.patch)- synced with BuildService * updated Suhosin patch to 0.9.6.2 * updated Suhosin extension to 0.9.16 * fixed php5-devel should provide PECL tool [#204006] * use bundled sqlite in suse versions =< 10.1 (pdo_sqlite stopped working properly with older sqlite3 libs) * do not use zend-multibyte anymore, please refer to phpbug #36711 and associated links, no applications uses this feature in the real world since it is disabled in all other distributions/OS.seems to cause more problems than solutions. * change php.ini, back to short_open_tag =off (the default) the package that depended on this setting no longer does. Also explicitely set the upload_tmp_dir in php.ini to deal with open_basedir recent changes (please refer to phpbug #39123) for the details. * suhosin.ini uses just the default recommended settings- created symlinks /usr/bin/php and /usr/bin/pear [#216166]- fixed implicit function decls in suhosin patch (keep the original patch intact and put fixes into separate patch)- updated to 5.2.0 final - merged changes from buildservice (by soporte@onfocus.cl): - updated suhosin to 0.9.10 - added suhosin patch - build with system PCRE if suse_release > 10.1 only [#215610] - suhosin extension does not require PDO - suhosin added to the reccommended list - php5-pspell to require at least aspell-en otherwise is useless [#217272]- php5-sqlite now uses our sqlite and sqlite2 packages to build and not bundled ones [#201440] - updated suhosin to 0.9.9- update to 5.2.0RC6- reset right path in extension_dir (php5-php-config.patch)- update to version 5.2.0RC5 - added suhosin extension (the hardened php replacement) [#210886]- update to version 5.2.0RC4 * added DSA key generation support to openssl_pkey_new() * updated PCRE to version 6.7 * increased default memory limit to 16 megabytes to accommodate for a more accurate memory utilization measurement * added support for httpOnly flag for session extension and cookie setting functions * added version specific registry keys to allow different configurations for different php version * added "PHPINIDir" Apache directive to apache and apache_hooks SAPIs * added an optional boolean parameter to memory_get_usage() and memory_get_peak_usage() to get memory size allocated by emalloc() or real size of memory allocated from system * moved extensions to PECL (filepro and hwapi) * improved SNMP, OpenSSL extension * improved the Zend memory manager, FastCGI SAPI, CURL, PCRE, PDO, SPL, xmlReader - merged changes from openSUSE build service * build without --enable-sigchild [#206533, php#28294, php#38342] * build CLI with libedit support (really-with-libedit.patch) * tweaked the default config a bit, to make it more secure * removed ini entries related to extensions we don't ship * t1lib is not currently needed for build, we need t1lib5 to do something useful * removeed --enable-ucd-snmp-hack (needed for ucd-snmp, but we use net-snmp) * pdo_odbc provided by php-odbc * php-suse-addons : o PHP5 is unlikely to parse php3 code, remove the file association o corrected apache directive is AddHandler not AddType * dropped extensions: o mysql, mysqli and pdo_mysql provided by php-mysql (reduce package count) o php-pdo_sqlite provided by php-sqlite o php-pdo_pgsql provided by php-pgsql o filepro dropped by upstream * new extension: o filter (kept static and cannot be unloaded, due security reasons) o json (added as Recommended) o zip (it uses a bundled library) - fixed gcc issues (gcc.patch) - droped obsoleted patches: include_path.patch, bug-37720.patch, bug-37306.patch, cgi_bugs.patch, bug-37587.patch, gd-fixes.patch, bug-37416.patch, main_bugs.patch, soap.patch, standard.patch, mbstring_bugs.patch, ze2_bugs.patch, xsl_bugs.patch, curl.patch- fixed build with X11R7- updated to version 5.1.4 * FastCGI interface was completely reimplemented * multitude of improvements to the SPL, SimpleXML, GD, CURL and Reflection extensions * support for many additional date formats added to the strtotime() * a performance improvements added to the engine and core extensions * added imap_savebody() that allows message body to be written to a file * added lchown() and lchgrp() to change user/group ownership of symlinks * upgraded bundled PCRE library to version 6.6 - merged changes from openSUSE build service * removed unneeded sablot-devel,sqlite-devel,pcre-devel,fam-devel and libmcal from BuildRequires * added php-ctype,php-dom,php-iconv,php-pdo,php-pdo_sqlite,php-sqlite, php-tokenizer,php-xmlreader,php-xmlwriter to Recommends * added php-mbstring php-gd php-pear php-gettext php-mysqli to Suggests * added support for optional readline(libedit) for CLI (disabled by default) * patches for zendengine (ze2_bugs.patch), xsl (xsl_bugs.patch), curl (curl.patch) and mbstring bugs (mbstring_bugs.patch), big soap patch (soap.patch) * removed obsoleted patches * fixed Safe Mode Bypass [#188243] (standard.patch) * upstream patches [php#37306, php#37416, php#37587, php#37720] [php#37576, php#37496, php#37341, php#37313, php#37256] (cgi_bugs.patch) [php#37346, php#37360] (gd-fixes.patch) * fixed build inconsistences, added php-hash module [#173023] * added pdo_odbc.so to php-odbc module [#190614] * build without explicit safe_mode and magic_quotes (unneeded) * removed useless GD --with-ttf configure option, only suitable for freetype 1hammer22 1265987822  GpGs5.2.12-0.1.1suhosin.inisuhosin.so/etc/php5/conf.d//usr/lib/php5/extensions/-march=i586 -mtune=i686 -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.suse.de/SUSE:openSUSE:11.1:Update:Test/standard/6e89d4d01840381f7138336d7d840be5-php5cpiolzma2i586i586-suse-linuxݘ=磉Y:?]"k%nS: ^j ܔR#1Y)(嬅L!a]璉cO:PSLW7c*|yK~ufIi ttѷUkwoG,TTbܿ]Vf l̀! h&hT@P<?!3y\)v͙~P Hts0w{.6I] NJA?Uݧ.+:]BxeVy|r [rLvεrbĹ"*%n>d(U."?C̦#IƩ.(_D_KxL 70 jZkG^fE@|kڤ pKx: 5eJSh d+ la Ld8Q'.,2s)7MCrAf%=ahu\/[K(J6&K_]oP{W|a zrw[> )_~h_2\dFqB '΅ё*:bH%B>)9Mǥ5'A~>"}ӈ Ը_X(tgGk]$LqKlKŊ#u$w!DzYZS{~ڸty8ôrw =WR {y* ,0w׽SETӲ8=.*?;Ϡ%~Q#A4_ctۆq#> Ԋ`d@4dkry`ԡ$*|:r1|:KEFIƕį-JpJpΆ2?\BP%Y9Q7 4enŸ7bV8<ƖcP%M5XQCvڰ5rxk-J]Z%k654I9.gs'5Y*4p_&%wDdW~hґ#oz@s>rؔ3BwRqʹ?EE M'[b)߈ D`9h?7;S$msƱaWD%5/dfET%E'İ*F$z Zt?o}t>zZv"7tzǟs5xwۜO2&0^'9NiVFZb5DBBl@rFM&!+<(z])Pwk N< azeNfA*U6zZ*Z"ȫ}:]!kn͘ɔ5S.VxZ}EvL;s <\L4Ey#tE|eўlGO"cuY =Ѭ@Jy'J2pPNǦ\Mz QQB)k < f8bQc: NƕOJ}t}q>A1X,Rz^$+}, PxvĭZQw2Ն]J2E'o|95+ $8([cmCбX{Lt \1^&m:ٰ8 S h`Jpds)mR>n#UGfUkp3]h6QA˞g=#XOKW>e$Y|DQ2hA;?00W%"1} ]Z)©c3J. Ri'z&ԕ.KBMsՓK];96$hYu.ubLv5‹ X 4 &/1(l~ɇ\#Ƶ}+0x42- gKg%ܪ6z8bIT;L&NL9dղI8n0d~;se$V~  0Fq3ȝ?lacN۬ix)/]# h͍\4/atJ0":l+-9̈roDC2v&:`N;wB8 8 5|8u{)CDg̛?P ӈTc ۢHi0C.kOV:I8YjI)}xUEK=r[zd̢;Z 3#xraFtأ9$9 />cRTOǟká+r',YGw`9HoH;.$)0vjkq~_]R$. n/7ۜ$ÚJ)BYY= ǾFMѦtwDa'wG^[O?u :)~a!Zn&-;bm:GC%uĻ vEedW8# }r=ӫBec9*@,;$JѰdA ɧx7oTb7\D[+F36t,:/?g1vx?%KYi{VZL Ę-]qsCnc:n-CƱ>2O\B ul=M}r=6Hd^C~ f`G d>\?U3GPln*xȬW? 8ЇwЅ2|/ߩ$QrDgnvOr2i҇͏ڒMނ癩4 Z8koADG:bՊ'qM*Sc!_W' ܗB Bӎ~zQ(Nͤ?>=/ģd 1XW0Nnta}7[kYS,ws {fA*Ew!RP#ehX?2w3F-\5qDD* 4ĕ=FUD^}1 O{`\H$6mq¨B =U㊺R!..@*1vahextVK˷v8 rgLX8w^{WF+X>^!OJ[[ǾKdsbpCt_i*j<[M?d;_,YZ 26<<Α, sA2ǃS̑ M2G3(4#l&qzփeRG4~z2{@lkL͓p3VbAq߷`jy`qN )e,{{@Dv/DY0fQ xfӂu0UnH>Ti,ҖVASzseQ (CLK;dzdI2EVc=0r. IxVwK ~mvMw1$@*:: ۬o0à(-1G=HnR}rxW:ߣBW4$I%cd܂7R[yw\OEY"Ě.U7~,F3W\ 4,S8sCtv&]>!T:Tq.*h8UK0Q`m 0Qc@?Cꕩ2l$~B-¾{iAn0(:1 X`iW$(rIyqЌ*tsL)}j $imtj"=\קԶJW`)#Rg? AX e_C22OpbtG( {((m,}K !W0 +=-N” l[WNZ#C-W=]V[3ePZ?W;6Њ^&]- t#S%dn1NϝN[}J(N6(nD/j.ۄu YeBO!1_66Ps.{Q}'D?0bd:k4a,b<3|4]eħ;A@tҩUS7[OLws|Hcϒ{& rs<]=ƜCV2>y6b{*%=4. oQ .OOEНK7˳(nCW݉j$ιͱB'ldUsɗ Ɵ9IE!1]oSLc H,P ({nC+jM (1VqfCQ~ ć #p./Q]HTV&П..t-Wu MIcz VGiJ.&b]#jM zBY pEu@v^d:`i/)#r /T'CœC:X=H ۪0 SXQRp|`ѧ =U q!AT"AkTr>&v,kI2V:'e/,HEU17xCKHBt.5PnW#"yQfyg?Ay=yVdZx_!*6 J]Ycjt^F;g](yGyZysfav@-_Zf7 Pȿ>FXL_7"㸤^<dOJ[cM54.0E]r[I|ՠ~Ƹ4@?/@&r8^mN$iQW}z:&m]gWtOf+TMKgo Bv corBPb līF/D>#jF| 1"vn\6(Bq5̹ICI*ϪO"*p_P^;… `7z]m.AEri󡗵pTeX${Yk4&XtWk_Q Yr,2^G5u}Cx+X2s/}Dvr5vjiv űf.a~WM% lH|y%q;RCCg6IJU Ѿj!pB.bMhc;4)"ӝ`{z zw="$JnvXƈ#p8ND X Y|K1@Ev(Чc2r>Lhr)ip^eT]2_>vĄ QhїX}-m*N`V@LELV/^E.kR JeS}ެ&,>WNnk9J_99`g2l?\C O#aBs uKbtV ֜Wo04RzRp ߐ`(>6?s8 6+zsb)Ȝ~(V\X MnaP{"z#iٯ!AKy( vC }УYlyJ fRNd(V;1&%7Oh]P'L%OV=+uYk'f 3E)VԷVp3%U\1[o8.m 8 PkFF#o!.0y+l<*;w-Mp)@jGTHЗPyA)sάH3(A+ЫhXiL lRs=egA`H){kLnz(~iTC9wUrJ W7ع$q* UZ)JJ,tQ*3!ؑK;3*T)be3L$2a"bҩd=Ս):iROSz)_h!2qy=b-WC+dvvP{)&1xcE7t*R%\L45 {jq4SӒ9 <: İŇu͜2nbYIKz{Q'PO[ƫr,ueڃGb1ƫɿE-6?60rMb/Sb\آiϛc3܅gEw:XZ{!/) n+U"/-1%’=4Ȏ0ے&Ywo1̌dGW+qr'*fPmF=}.SXP9U !Z`O[ȑpi.(d<3eWԞܻ=b >JllI\ +.Q`m- ץs:.FRqw^p )> -1ta"'#[d As ajVgp,ĺ,3[eQm:2 2،56ۧ?@$cs.o6ݡуoWz/~6~aY`3iE ߒ^mٖP^OznpȉM/Ѫo^W(>(w̐wD?V3xhG[XV}J QT2 W-cv_H>8fJr@ncP9 gYke:".zړQP^ohﯷ71=Ml9<@,i 5\&>7Pd_fr!$ )8mSij;] - "WR f5_*o{2hi]]LO/h9j5snC]Qi[1{FÖ!FP`L00Z#RRbAzyj4N96:&{E:XX]23Qwe5\Y$UBlP-"1Hp,\hZ'a )bhWZ*vf=Jj z ;3nR-i06?X/ƭq?a/\u; wS9}IKAGIrQBt,wdP/פk3> FkqٷO qcc.zIck7τ4Z dЁGjBsG)CJZ盚Ґe>qsU_g/ѷJ{%a%CF-ilF<>|JHLcǀb n{ND8c^s55-5iKf[rȚ%B`˝vyūrkd1O_Xk{}F# WGdnry%_n[d v-?G堵+1jO%/Գ9- Jʊ4}J2QVH^Ol/ Yt&nB7,̤@ҐpĚ؈bF&$ Y@rWeO#XU?!掠ZWU rMfJ]݈W\ޗў{)]69S",!˼RbVlPE iab u *qj2NgCVf;XgB[|C,XRt-="mlU\q~mK08.Y>˽9K ]l2^׃n;nELqӂ#`>4ʊ1[gH]^Ʊkۼz%2K>R*#ӆ7y}rͥbd=܉)0eejrze;\{biyVL #0 -9~073:%-{ݐdx, I{m.80 pv zxGz> Ԋx\ .nzO˾35"'F?2kR*85->e3,݆I2%iǽ]؉-z;MYX3Φ" sA0c}'GҐ4v7k&’$V΀zxߪH6YXD;19CI>Oc.9mڃPUB0"[{ Oeǡ" X` 0 5{i"S]~($pQvg oaCGG Ncq^8vG{Bj; Es n]K-@݋tCc$Q }'4rɪ-+ +>7ztJ/qLղd~;é1qBRIr:E޾3hp{D{F2N>R I_XZd|eXi6\5YyUّfOQHSm\|c*dD;̊oT+zOꜧYj0PT)HO-yf1MIUQ P_.S⸔Q45>Hh(oҶl!%jh8Ra1RoE#Biv~Br,0,srL㢶b`26xF?c۪b+pxzU>jfai~m?"Im%h-R.F0]ȺMp8TXna7]rr!L$'g#%m,] x> &U_m`RFNbBFcYBTcſMP}:v./n˟Gp.?}g[WYׅ4ȊH)λUsn:raߴ7̧!A^T¯Fr0x\v7I܅|G[?ƉܩiO**<ߌ]!( Sg$e W'K~RRҔU{k $Z 3CcjIN[bmAș|D¨zd^8foa0:4&'s%nUa>k <&.n.m(szg?J n(Q|ɂGWn<;t?~O;nAIK۶OeRFdv3r3cj5T䃸fہZqԞ[L&,P/O25520iƐeIؚt#|ؒi0 ÌKr^km,I#+ B7%l? wR5P*#럝 ;?&=l?'^+H;m+"4+R_}Gh.c0ڕz=n~Pt/ mh!fFMI A<9}1w$i,lr" *]>$:'̘EB7sQvD/}5RmUfH?3.V`p$eCy(x!& .J#4*f W:CXȀ4>.lg|Aaa(}zKJe$F(-#7T6PLim EA+Ƨ-fYl(z^M ǻ quCtqky)q"X9e$|綜wH\W\x>ޯVNNcA˅ٯ1`/p4CڡZ4iCHA kn'.@uA_fE:mMf' kRYRBuxAvA~8;/ϒ *hTKGbrtڠ4N=gqKAዏ|@|s4Y=spX 629[%t>)\ueiV_qKkQwטl4Dޫ`=ou[)_,wmhk %(׭ -_"qZrtGs68 t+^lyzySHf ?ǎA]*+a,w}R:GĘWs" Ps8) bݷ 6]Uel* )&uܱ-26|c1fƼZK6& $E_ء1\A; ;h]7T=%ŰylJEE^)zv֍"ۀA= HՠWW`^EUXrfb0Wf0qz9`&5MVMd;5+m*h*7N21{!9'aoQ7JSg! C ޭLCe`;%6]0rѧxh$L[z.z<]:dlô߂V.#E34 +\ec6.`xSq9ݏ..1b; GL˔*SoHs 3P´Cc CTl Jv5tSV}HաZac^N&! |W$QK\M >Ixz*n:$ ]\լ7rM[g )զNF , >t`%zXC_f=7=ʮQѹ6Tf#,>UY3؃9B^{v߆Ԅnۯ6vSl?7IB;g3,3s\wU Ӫ p7țMl>WssZ gCKڳV\"(vYmَݢ>Iէ8zk3uKųbgK`E4VҢcZO}PT|%W7۸>FEj ,Xآr.2Yqg/tk7'BؤA/?°yB GNhpNHL޷T9#"HМ Cq 1%M>/ww۫[ fUƣhV cqmå=>?w""L֒| n4+ 1U8e?;OՆ8>b X,f1)fL 2SCa):S䵎Rks5[0Ҷm)տ Pf xrbڊ`/퀫"i{QjJ{@A ^lM Ҹ*b^VQָ1ʹCe$6Huҙ& ܪ8L˲xk {X B'ݍQ%]4*P9+t)})?=fKz3WOHD*4XI'Z,n93?0pJKxCǢ=m/y7ky8)z/H57T/&Q  w!)>HƲ'rP@A"a61AW>s[ 7h Mˠqp#2[ E(4EBA?Ű,~JAIՆb}¡ðNk'16^<& UIs TFy _f'kƷj2AAq#=\ih~Vk03$s> 40$)0ӚGvYk=|E(|ݢfC?h#K(: OMʹji~ ˭mxmB7KhmItw ؔ~u4x1I+ذWo~ KzOv9+ؔ*[&XoFYVL(uVgNuX + EϳTgM,!BS\t)x,/6i)H+gex}BݽYn^R*sH*?ycfCxH|(>֌3Eć%Dj[NKQR!A¯R#53-ΨV7.񠄟(SGq/ky 1u > ?ZڭvHج{djP_[0b. #X4j~h4 2I+IM-.v2k kSo!8Cqu;&POA0 iQy݉XeJY;!yfIk>ja5b9}Řlwj{2?vgLiq%)?/)-|t?H(Kk܇e#/@zk rJ<.%\W̏}¬E. pcStL)%fIRʦ.h1* }P1ͣ s.2\ʻy퉺[ 0kDgWRI!%ţk3_:op<[|3