php5-zip-5.2.14-0.2.1<>,⭉L(/=„~U$W8jFolYRL?6}f#g3%ӏG%9i~z{rNnO Z,0jlBS뒻4(;vַ령Na[[T/|ǾI~T6)Zq,Ⱶ(0ԾVla!Cx?nBL\@ݗ Q٢3O>qG*pdIlJ,!$Aӥ篺i kBI^/"v@>6?d   .2 Kex~      8 h T (y8O9O: 7OFG0H8I@XDYP\`]h^wbc.defklzCphp5-zip5.2.140.2.1PHP5 Extension ModuleZip is an extension to create, modify and read zip files. Authors: -------- The PHP Group See http://www.php.net/credits.php for more detailsL0kuckuk,openSUSE 11.1openSUSE"The PHP License, version 3.1. ..."; The PHP License, version 3.1.http://bugs.opensuse.orgDevelopment/Libraries/PHPhttp://www.php.netlinuxi586I,LLe8ea530d3115262c5ca8611b046f1335ff738eed3bb8891d4ff328e13d12ed46rootrootrootrootphp5-5.2.14-0.2.1.src.rpmphp-zipzip.sophp5-zipJJ@@@@@@@@Jphp5rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libz.so.1rpmlib(PayloadIsLzma)5.2.144.0-13.0.4-14.4.2-14.4.2.3L*@LZK]KqN@J@J/@J_@J8J+@I@ImIk0I@I@I@I@H@HH|@H"@H@G@G GZ@G@GsGaG^{G8@@Fֱ@F@FōF @FF;@FF@F@F} @FnF` @F]g@FQFP8@FHO@FDZF=@Faffected_rows on no connection causes segfault). - Fixed bug php#50680 (strtotime() does not support eighth ordinal number). - Fixed bug php#50661 (DOMDocument::loadXML does not allow UTF-16). - Fixed bug php#50657 (copy() with an empty (zero-byte) HTTP source succeeds but returns false). - Fixed bug php#50636 (MySQLi_Result sets values before calling constructor). - Fixed bug php#50632 (filter_input() does not return default value if the variable does not exist). - Fixed bug php#50576 (XML_OPTION_SKIP_TAGSTART option has no effect). - Fixed bug php#50575 (PDO_PGSQL LOBs are not compatible with PostgreSQL 8.5). - Fixed bug php#50558 (Broken object model when extending tidy). - Fixed bug php#50540 (Crash while running ldap_next_reference test cases). - Fixed bug php#50508 (compile failure: Conflicting HEADER type declarations). - Fixed bug php#50394 (Reference argument converted to value in __call). - Fixed bug php#49851 (http wrapper breaks on 1024 char long headers). - Fixed bug php#49600 (imageTTFText text shifted right). - Fixed bug php#49585 (date_format buffer not long enough for >4 digit years). - Fixed bug php#49463 (setAttributeNS fails setting default namespace). - Fixed bug php#48667 (Implementing Iterator and IteratorAggregate). - Fixed bug php#48590 (SoapClient does not honor max_redirects). - Fixed bug php#48190 (Content-type parameter "boundary" is not case-insensitive in HTTP uploads). - Fixed bug php#47601 (defined() requires class to exist when testing for class constants). - Fixed bug php#47409 (extract() problem with array containing word "this"). - Fixed bug php#47002 (Field truncation when reading from dbase dbs with more then 1024 fields). - Fixed bug php#45599 (strip_tags() truncates rest of string with invalid attribute). - Fixed bug php#44827 (define() allows :: in constant names). - depracated really-with-libedit.patch, bnc-518300.patch,php5-alignment.patch, arrayobject-mess.patch, BNC-457056_2.patch CVE-2008-5557.patch, CVE-2008-5498.patch, CVE-2008-2829.patch, CVE-2009-4017.patch, CVE-2009-2626.patch, CVE-2009-2687.patch, CVE-2009-0754.patch, CVE-2009-1271.patch, CVE-2009-1272.patch, CVE-2009-3291.patch, CVE-2009-3292.patch, CVE-2009-3293.patch, CVE-2008-5624.patch, CVE-2008-5625.patch, CVE-2008-5814.patch, CVE-2009-3546.patch, CVE-2009-4142.patch, - reworked bnc-435595.patch (change grabbed from php 5.3.2) - added patch php5-session.patch to fix build - fix CVE-2010-0397 [bnc#588975]- fix CVE-2008-5624, CVE-2008-5625, CVE-2008-5814 [bnc#568527] - fix CVE-2009-3546 [bnc#547525] - fix CVE-2009-4142 [bnc#565924] - fix CVE-2009-2626,,CVE-2009-4017 [bnc#557157]- VUL-0: php5: 5.2.11 release [bnc#540242] - L3: Problem with xmlparse in PHP5- VUL-1: php5: exif module denial of service [bnc#513080] - PHP read_exif_data() only returns the first letter of UTF-16 strings [bnc#518300]- PHP5: json_decode not working correctly after update [bnc#521033]- fix CVE-2009-1271, CVE-2009-1272 [bnc#493122]- missing timezone hard dependency [bnc#486359]- VUL-0: php5: memory disclosure by imagerotate() [bnc#480850] - VUL-0: php5: mbstring.func_overload set in .htaccess becomes global [bnc#471419]- libxml version detection of previous fix will never work. 11.1 version is 2.7.2 not 2.7.3 and presence of XML_PARSE_OLDSAX enumeration value cannot be tested with defined()..- VUL-0: php: buffer overflow in ext/mbstring [BNC#462499] - VUL-0: php5: dir traversal vulnerability in ZipArchive [BNC#464048] - PHP5: ext/xml is broken due to libxml2 2.7.x changes [BNC#457056] * Note that this MUST be submitted AFTER libxml2 update- fix ext/imap buffer overflows, old API used [#BNC402665]- QA Results fixed * array_pad "succeeds" when padding with large negative number [BNC#435595]- QA Results: fix PPC64 regression of gd module [BNC#364518]- update system timezone support patch to r4 * added "System/Localtime" tzname which uses /etc/localtime- Using the ArrayObject class leaks and corrupt memory, causing a really nasty undefined behaviour in userspace code, whatever can happend due to corruption of the symbol table. see http://bugs.php.net/bug.php?id=46222 where martian variables get created as example.- update suhosin to version 0.9.27 * Fixed problem with suhosin.perdir Thanks to Hosteurope for tracking this down * Fixed problems with ext/uploadprogress Reported by: Christian Stocker * Added suhosin.srand.ignore and suhosin.mt_srand.ignore (default: on) * Modified rand()/srand() to use the Mersenne Twister algorithm with separate state * Added better internal seeding of rand() and mt_rand()- do not restart apache after update of mod_php5 [BNC#419508]- Don't try to replace libtool. - Fix alignment violation. - Don't define feature test macros after system headers.- update to PHP 5.2.6 * Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin. * Fixed integer overflow in printf() identified by Maksymilian Aciemowicz. * Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh. * Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz. * Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser. * Fixed two possible crashes inside the posix extension. * Fixed bug #44069 (Huge memory usage with concatenation using . instead of .=) * Fixed bug #44141 (private parent constructor callable through static function). * Fixed bug #43589 (a possible infinite loop in bz2_filter.c). * Fixed bug #43450 (Memory leak on some functions with implicit object __toString() call). * Fixed bug #43201 (Crash on using uninitialized vals and __get/__set). * Fixed bug #42978 (mismatch between number of bound params and values causes a crash in pdo_pgsql). * Fixed bug #42937 (__call() method not invoked when methods are called on parent from child class). * Fixed bug #42736 (xmlrpc_server_call_method() crashes). * Fixed bug #42369 (Implicit conversion to string leaks memory). * Fixed bug #41562 (SimpleXML memory issue). * Fixed bug #43606 (define missing depencies of the exif extension). (crrodriguez at suse dot de) * Fixed bug #43498 (file_exists() on a proftpd server got SIZE not allowed in ASCII mode). (Ilia, crrodriguez at suse dot de) * Over 120 bug fixes.- update suhosin extension to version 0.9.23 - Fixed suhosin extension now compiles with snapshots of PHP 5.3 - Fixed crypt() behaves like normal again when there is no salt supplied - wrong Obsoletes causes upgrade trouble [bnc #355618]- use %%_with_ming and %%_with_qdbm instead of %%opensuse_bs, enables building in the bs in other projects than server:php (bnc#357917)- Try patch recently published by Redhat that allows PHP to use the system timezone database instead of the bundled one.- Do not hard require php5-timezonedb, instead provide a capability php(tzdatabase) = builtin_tz_ver so it gets installed via rpm Supplements only when needed.- PHP is leaking file descriptors badly on relative includes (php-5.2.5-fdleak.patch)- suhosin 0.9.22 - Fixed function_exists() now checks the Suhosin permissions - Fixed crypt() salt no longer uses Blowfish by default - Fixed .htaccess/perdir support - Fixed compilation problem on OS/X - Added protection against some attacks through _SERVER variables - Added suhosin.server.strip and suhosin.server.encode- use /dev/urandom for generating session-IDs [#337005] - L3: PHP: Venezuela Time Zone Update starting date changed to December 9 [#345548]- update to PHP 5.2.5 * Fixed dl() to only accept filenames. reported by Laurent Gaffie. * Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887). * Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences. * Fixed possible triggering of buffer overflows inside glibc implementations of the fnmatch(), setlocale() and glob() functions. Reported by Laurent Gaffie. * Fixed "mail.force_extra_parameters" php.ini directive not to be modifiable in .htaccess due to the security implications reported by SecurityReason. * Fixed bug #42869 (automatic session id insertion adds sessions id to non-local forms). * Fixed bug #41561 (Values set with php_admin_* in httpd.conf can be overwritten with ini_set()). * Upgraded PCRE to version 7.3 (Nuno) * Added optional parameter $provide_object to debug_backtrace(). (Sebastian) * Added alpha support for imagefilter() IMG_FILTER_COLORIZE. (Pierre) * Added ability to control memory consumption between request using ZEND_MM_COMPACT environment variable. (Dmitry) * Improved speed of array_intersect_key(), array_intersect_assoc(), array_uintersect_assoc(), array_diff_key(), array_diff_assoc() and array_udiff_assoc(). (Dmitry) * Fixed move_uploaded_file() to always set file permissions of resulting file according to UMASK. (Andrew Sitnikov) * Fixed possible crash in ext/soap because of uninitialized value. (Zdash Urf) * Fixed regression in glob() when enforcing safe_mode/open_basedir checks on paths containing '*'. (Ilia) * Fixed PDO crash when driver returns empty LOB stream. (Stas) * Fixed iconv_*() functions to limit argument sizes as workaround to libc bug (CVE-2007-4783, CVE-2007-4840 by Laurent Gaffie). (Christian Hoffmann, Stas) * Fixed missing brackets leading to build warning and error in the log. Win32 code. (Andrey) * Fixed leaks with multiple connects on one mysqli object. (Andrey) * Fixed imagerectangle regression with 1x1 rectangle (libgd #106). (Pierre) * Fixed bug #43196 (array_intersect_assoc() crashes with non-array input). (Jani) * Fixed bug #43139 (PDO ignores ATTR_DEFAULT_FETCH_MODE in some cases with fetchAll()). (Ilia) * Fixed bug #43137 (rmdir() and rename() do not clear statcache). (Jani) * Fixed bug #43130 (Bound parameters cannot have - in their name). (Ilia) * Fixed bug #43099 (XMLWriter::endElement() does not check # of params). (Ilia) * Fixed bug #43020 (Warning message is missing with shuffle() and more than one argument). (Scott) * Fixed bug #42976 (Crash when constructor for newInstance() or newInstanceArgs() fails) (Ilia) * Fixed bug #42917 (PDO::FETCH_KEY_PAIR doesn't work with setFetchMode). (Ilia) * Fixed bug #42890 (Constant "LIST" defined by mysqlclient and c-client). (Andrey) * Fixed bug #42818 ($foo = clone(array()); leaks memory). (Dmitry) * Fixed bug #42817 (clone() on a non-object does not result in a fatal error). (Ilia) * Fixed bug #42785 (json_encode() formats doubles according to locale rather then following standard syntax). (Ilia) * Fixed bug #42783 (pg_insert() does not accept an empty list for insertion). (Ilia) * Fixed bug #42773 (WSDL error causes HTTP 500 Response). (Dmitry) * Fixed bug #42772 (Storing $this in a static var fails while handling a cast to string). (Dmitry) * Fixed bug #42767 (highlight_string() truncates trailing comment). (Ilia) * Fixed bug #42739 (mkdir() doesn't like a trailing slash when safe_mode is enabled). (Ilia) * Fixed bug #42703 (Exception raised in an iterator::current() causes segfault in FilterIterator) (Marcus) * Fixed bug #42699 (PHP_SELF duplicates path). (Dmitry) * Fixed bug #42654 (RecursiveIteratorIterator modifies only part of leaves) (Marcus) * Fixed bug #42643 (CLI segfaults if using ATTR_PERSISTENT). (Ilia) * Fixed bug #42637 (SoapFault : Only http and https are allowed). (Bill Moran) * Fixed bug #42627 (bz2 extension fails to build with -fno-common). (dolecek at netbsd dot org) * Fixed bug #42596 (session.save_path MODE option does not work). (Ilia) * Fixed bug #42590 (Make the engine recognize \v and \f escape sequences). (Ilia) * Fixed bug #42587 (behavior change regarding symlinked .php files). (Dmitry) * Fixed bug #42579 (apache_reset_timeout() does not exist). (Jani) * Fixed bug #42549 (ext/mysql failed to compile with libmysql 3.23). (Scott) * Fixed bug #42523 (PHP_SELF duplicates path). (Dmitry) * Fixed bug #42512 (ip2long('255.255.255.255') should return 4294967295 on 64-bit PHP). (Derick) * Fixed bug #42506 (php_pgsql_convert() timezone parse bug) (nonunnet at gmail dot com, Ilia) * Fixed bug #42462 (Segmentation when trying to set an attribute in a DOMElement). (Rob) * Fixed bug #42453 (CGI SAPI does not shut down cleanly with -i/-m/-v cmdline options). (Dmitry) * Fixed bug #42452 (PDO classes do not expose Reflection API information). (Hannes) * Fixed bug #42468 (Write lock on file_get_contents fails when using a compression stream). (Ilia) * Fixed bug #42488 (SoapServer reports an encoding error and the error itself breaks). (Dmitry) * Fixed bug #42378 (mysqli_stmt_bind_result memory exhaustion). (Andrey) * Fixed bug #42359 (xsd:list type not parsed). (Dmitry) * Fixed bug #42326 (SoapServer crash). (Dmitry) * Fixed bug #42214 (SoapServer sends clients internal PHP errors). (Dmitry) * Fixed bug #42189 (xmlrpc_set_type() crashes php on invalid datetime values). (Ilia) * Fixed bug #42139 (XMLReader option constants are broken using XML()). (Rob) * Fixed bug #42086 (SoapServer return Procedure '' not present for WSIBasic compliant wsdl). (Dmitry) * Fixed bug #41822 (Relative includes broken when getcwd() fails). (Ab5602, Jani) * Fixed bug #39651 (proc_open() append mode doesn't work on windows). (Nuno)- update to PHP 5.2.4, no relevant changes since RC3.- PHP 5.2.4RC3 - Fixed version_compare() to support "rc" as well as "RC" for release candidate version numbers. - Fixed bug #42368 (Incorrect error message displayed by pg_escape_string). (Ilia) - Fixed phpbug #42365 and Novell bugzilla #292998 (glob() crashes and/or accepts way too many flags). (Jani) - Fixed bug #42183 (classmap causes crash in non-wsdl mode). (Dmitry) - Fixed bug #42009 (is_a() and is_subclass_of() should NOT call autoload, in the same way as "instanceof" operator). (Dmitry) - Fixed bug #41904 (proc_open(): empty env array should cause empty environment to be passed to process). (Jani) - Fixed bug #37273 (Symlinks and mod_files session handler allow open_basedir bypass). (Ilia) - remove wrong hardcoded requirement on libedit - devel package at least does not need libtool the php build enviroment uses a private copy. - drop no longer needed patches already in upstream- updated to version 5.2.4RC2 - Fixed oci8 and PDO_OCI extensions to allow configuring with Oracle 11g client libraries. (Chris Jones) - Fixed bug #42292 ($PHP_CONFIG not set for phpized builds). (Jani) - Fixed bug #42261 (header wrong for date field). (roberto at spadim dot com dot br, Ilia) - Fixed bug #42259 (SimpleXMLIterator loses ancestry). (Rob) - Fixed bug #42247 (ldap_parse_result() not defined under win32). (Jani) - Fixed bug #42243 (copy() does not output an error when the first arg is a dir). (Ilia) - Fixed bug #42242 (sybase_connect() crashes). (Ilia) - Fixed bug #42237 (stream_copy_to_stream returns invalid values for mmaped streams). (andrew dot minerd at sellingsource dot com, Ilia) - Fixed bug #42222 (possible buffer overflow in php_openssl_make_REQ). (Pierre) - Fixed bug #42211 (property_exists() fails to find protected properties from a parent class). (Dmitry) - Fixed bug #42208 (substr_replace() crashes when the same array is passed more than once). (crrodriguez at suse dot de, Ilia) - Fixed bug #42198 (SCRIPT_NAME and PHP_SELF truncated when inside a userdir and using PATH_INFO). (Dmitry) - Fixed bug #42195 (C++ compiler required always). (Jani) - Fixed bug #42117 (bzip2.compress loses data in internal buffer). (Philip, Ilia) - Fixed bug #42082 (NodeList length zero should be empty). (Hannes) - Fixed bug #36492 (Userfilters can leak buckets). (Sara) - Fixed bug #31892 (PHP_SELF incorrect without cgi.fix_pathinfo, but turning on screws up PATH_INFO). (Dmitry)- updated to version 5.2.4RC1 - dropped obsoleted PHP_5_2-CVS-2007-07-30.patch.bz2- updated to latest state of PHP_5_2 branch; highlights from the NEWS file: - Upgraded PCRE to version 7.2 (Nuno) - Updated timezone database to version 2007.6. (Derick) - Improved openssl_x509_parse() to return extensions in readable form. (Dmitry) - Changed "display_errors" php.ini option to accept "stderr" as value which makes the error messages to be outputted to STDERR instead of STDOUT with CGI and CLI SAPIs (FR #22839). (Jani) - Changed error handler to send HTTP 500 instead of blank page on PHP errors. (Dmitry, Andrei Nigmatulin) - Added check for unknown options passed to configure. (Jani) - Added persistent connection status checker to pdo_pgsql. (Elvis Pranskevichus, Ilia) - Added support for ATTR_TIMEOUT inside pdo_pgsql driver. (Ilia) - Added php_ini_loaded_file() function which returns the path to the actual php.ini in use. (Jani) - Added GD version constants GD_MAJOR_VERSION, GD_MINOR_VERSION GD_RELEASE_VERSION, GD_EXTRA_VERSION and GD_VERSION_STRING. (Pierre) - Added missing open_basedir checks to CGI. (anight at eyelinkmedia dot com, Tony) - Added missing format validator to unpack() function. (Ilia) - Added missing error check inside bcpowmod(). (Ilia) - Added CURLOPT_PRIVATE & CURLINFO_PRIVATE constants. (Andrey A. Belashkov, Tony) - Added missing MSG_EOR and MSG_EOF constants to sockets extension. (Jani) - Added PCRE_VERSION constant. (Tony) - Added ReflectionExtension::info() function to print the phpinfo() block for an extension. (Johannes) - Implemented FR #41884 (ReflectionClass::getDefaultProperties() does not handle static attributes). (Tony) - plus lots of bugfixes - fixed the pear phar archive to run with 5.2.4 [http://bugs.php.net/bug.php?id=42146]- added /var/lib/pear to php5-pear.rpm- fix nasty deadlock in pear - update php5-ze2-fixes.patch and actually apply it.- fixed YOU honors Recommends, breaks php update [#291551] (moved php-suhosin from Recommends to Suggests)- provide /srv/www/cgi-bin/php5 compat symlink instead of patching config files- fixed a mess with update-alternatives PreReq uncovered by newer build versions. actually every subpackage that uses update-alternatives should PreReq it. - fix some ZE2 bugs.- drop php5.xpm and the Icon: line from the specfile (the icon is not used at all and it breaks rpm -q --specfile php5.spec)- PHP version 5.2.3 see http://www.php.net/releases/5_2_3.php - important: PHP-cgi now lives in /usr, package attempts to fix both lighttpd and apache2 fastcgi config files.- use system re2c in factory. - enable support for qbdm in the dba extension (build service only) - enable the ming extension (build service only)- fixed the dba extension adding -ldb-4.x to global LDFLAGS, causing unnecessary dependency in /usr/bin/php5 [http://bugs.php.net/bug.php?id=41455]- updated suhosin to version 0.9.20, security fix + bugfixes see http://www.hardened-php.net/suhosin/changelog.html for more detail.- fix devel package, in the reality PHP does not currenly require expat. headers provides a expat compatibility layer but it is no longer in use by our packages as libxml2 is always prefered, (and HAVE_LIBEXPAT is not defined)- update php5-test-fixes fixing another bug in zend_compile.c - use rpm macros in the spec file - when removing apache2-mod_php5, unload it from apache first. - when updating apache2-mod_php5 restart apache with restart on update macro.- HTTP_RAW_POST_DATA superglobal broken (php5-phpbug-41293.patch) - better fix for MOPB 41.- remove --enable-memory-limit configure flag, it disappeared in 5.2.1, nowdays memory_limit is always enabled.- changed expat to libexpat-devel in Requires of devel subpackage- add php5-test-fixes.patch fixing a test case that wont pass on i586 as well a real fix for Zend/tests/bug41117_1.phpt problem, that was commited after the release was done. there is another test case that fails in 10.2 ext/pcre/tests/bug40195.phpt but this is not a PHP problem but a bug in PCRE. - added missing fix for PMOPB-45-2007 PHP ext/filter Email Validation Vulnerability (minor)- php5-devel package now requires pcre-devel for > 10.1 as 5.2.2 installs php_pcre.h header that needs it.- fixed some new compiler warnings- upgrade to PHP 5.2.2, fixed hundreds of bugs including MOPB ones if you need the complete changes see http://www.php.net/ChangeLog-5.php#5.2.2- Upgrade suhosin extension to version 0.9.19 see http://www.hardened-php.net/suhosin/changelog.html for details- added bison to BuildRequires, removed update-desktop-files- fixed unpack() on big-endian 64bit (revert-phpbug38770.patch) - blacklist more env variables when safe_mode is on (php5-config.patch)- fix Requires of -devel package to include only what is really needed for operation of the pecl tool as well the neccesary headers to compile php extensions. - Fix MOPB 24 "PHP array_user_key_compare() Double DTOR Vulnerability" - note that fix for MOPB 23 was included in the previous patchset.- add security fixes for MOPB 20, 21 and 22. - RPM_BUILD_ROOT is never defined in %post.- fix/workaround for php5-gd problem with typo3 [#236680] - add fix for MOPB-14-2007 PHP substr_compare() Information Leak Vulnerability. - add secfix for import_request_variables() ancient problem, users of suhosin extension are not affected. - Run the test suite here- Update suhosin extension to version 0.9.18 fixing a session problem.- Update suhosin extension to version 0.9.17. see http://www.hardened-php.net/suhosin/changelog.html for details.- add t1lib support in php5-gd (10.3 and up only) - an off-by-one in str_replace may cause a crash.- PHP 5.2.1. for a full list of changes see http://www.php.net/ChangeLog-5.php#5.2.1 - add Obsoletes for extensions we dont ship anymore- fix getenv() modifing $_POST, breaks suhosin badly when register_* is On and variables orde is "GPCS" (default). - change/remove obsoleted patches- synced with BuildService * file "session_mm_apache2handler0.sem" written at boot [#229200] (php5-config.patch) * for certain functionality php5-exif requires php5-mbstring * php5-ldap requires php5-openssl * remove LDAP_DEPRECATED from CFLAGS, module already takes care of this. * patch potential HTTP_SESSION_VARS et all hijack when register_globals is On users from suhosin extension are not affected.(php5-session-rgon-hijack.patch) * on 10.2 and up php5-devel should require pcre-devel sqlite-devel sqlite2-devel * php5-devel is mostly useless without autoconf automake libtool bison make gcc. * added patches: phpbug-39350.patch oldhat-phpinputdata-secfix.patch ze2-fixes.patch filter.patch ext-lib64again.patch- fixed string comparison in xmlrpc module (strcmp.patch) - allways apply %%patch9- updated the curl module from cvs to fix build with curl-7.16 (curl-cvs-fix.patch, dropped gcc.patch)- fixed VUL-0: php session.save_path open_basedir bypass [#227569] (save_path-secfix.patch)- synced with BuildService * updated Suhosin patch to 0.9.6.2 * updated Suhosin extension to 0.9.16 * fixed php5-devel should provide PECL tool [#204006] * use bundled sqlite in suse versions =< 10.1 (pdo_sqlite stopped working properly with older sqlite3 libs) * do not use zend-multibyte anymore, please refer to phpbug #36711 and associated links, no applications uses this feature in the real world since it is disabled in all other distributions/OS.seems to cause more problems than solutions. * change php.ini, back to short_open_tag =off (the default) the package that depended on this setting no longer does. Also explicitely set the upload_tmp_dir in php.ini to deal with open_basedir recent changes (please refer to phpbug #39123) for the details. * suhosin.ini uses just the default recommended settings- created symlinks /usr/bin/php and /usr/bin/pear [#216166]- fixed implicit function decls in suhosin patch (keep the original patch intact and put fixes into separate patch)- updated to 5.2.0 final - merged changes from buildservice (by soporte@onfocus.cl): - updated suhosin to 0.9.10 - added suhosin patch - build with system PCRE if suse_release > 10.1 only [#215610] - suhosin extension does not require PDO - suhosin added to the reccommended list - php5-pspell to require at least aspell-en otherwise is useless [#217272]- php5-sqlite now uses our sqlite and sqlite2 packages to build and not bundled ones [#201440] - updated suhosin to 0.9.9- update to 5.2.0RC6- reset right path in extension_dir (php5-php-config.patch)- update to version 5.2.0RC5 - added suhosin extension (the hardened php replacement) [#210886]- update to version 5.2.0RC4 * added DSA key generation support to openssl_pkey_new() * updated PCRE to version 6.7 * increased default memory limit to 16 megabytes to accommodate for a more accurate memory utilization measurement * added support for httpOnly flag for session extension and cookie setting functions * added version specific registry keys to allow different configurations for different php version * added "PHPINIDir" Apache directive to apache and apache_hooks SAPIs * added an optional boolean parameter to memory_get_usage() and memory_get_peak_usage() to get memory size allocated by emalloc() or real size of memory allocated from system * moved extensions to PECL (filepro and hwapi) * improved SNMP, OpenSSL extension * improved the Zend memory manager, FastCGI SAPI, CURL, PCRE, PDO, SPL, xmlReader - merged changes from openSUSE build service * build without --enable-sigchild [#206533, php#28294, php#38342] * build CLI with libedit support (really-with-libedit.patch) * tweaked the default config a bit, to make it more secure * removed ini entries related to extensions we don't ship * t1lib is not currently needed for build, we need t1lib5 to do something useful * removeed --enable-ucd-snmp-hack (needed for ucd-snmp, but we use net-snmp) * pdo_odbc provided by php-odbc * php-suse-addons : o PHP5 is unlikely to parse php3 code, remove the file association o corrected apache directive is AddHandler not AddType * dropped extensions: o mysql, mysqli and pdo_mysql provided by php-mysql (reduce package count) o php-pdo_sqlite provided by php-sqlite o php-pdo_pgsql provided by php-pgsql o filepro dropped by upstream * new extension: o filter (kept static and cannot be unloaded, due security reasons) o json (added as Recommended) o zip (it uses a bundled library) - fixed gcc issues (gcc.patch) - droped obsoleted patches: include_path.patch, bug-37720.patch, bug-37306.patch, cgi_bugs.patch, bug-37587.patch, gd-fixes.patch, bug-37416.patch, main_bugs.patch, soap.patch, standard.patch, mbstring_bugs.patch, ze2_bugs.patch, xsl_bugs.patch, curl.patch- fixed build with X11R7- updated to version 5.1.4 * FastCGI interface was completely reimplemented * multitude of improvements to the SPL, SimpleXML, GD, CURL and Reflection extensions * support for many additional date formats added to the strtotime() * a performance improvements added to the engine and core extensions * added imap_savebody() that allows message body to be written to a file * added lchown() and lchgrp() to change user/group ownership of symlinks * upgraded bundled PCRE library to version 6.6 - merged changes from openSUSE build service * removed unneeded sablot-devel,sqlite-devel,pcre-devel,fam-devel and libmcal from BuildRequires * added php-ctype,php-dom,php-iconv,php-pdo,php-pdo_sqlite,php-sqlite, php-tokenizer,php-xmlreader,php-xmlwriter to Recommends * added php-mbstring php-gd php-pear php-gettext php-mysqli to Suggests * added support for optional readline(libedit) for CLI (disabled by default) * patches for zendengine (ze2_bugs.patch), xsl (xsl_bugs.patch), curl (curl.patch) and mbstring bugs (mbstring_bugs.patch), big soap patch (soap.patch) * removed obsoleted patches * fixed Safe Mode Bypass [#188243] (standard.patch) * upstream patches [php#37306, php#37416, php#37587, php#37720] [php#37576, php#37496, php#37341, php#37313, php#37256] (cgi_bugs.patch) [php#37346, php#37360] (gd-fixes.patch) * fixed build inconsistences, added php-hash module [#173023] * added pdo_odbc.so to php-odbc module [#190614] * build without explicit safe_mode and magic_quotes (unneeded) * removed useless GD --with-ttf configure option, only suitable for freetype 1kuckuk 1286402096   P5.2.14-0.2.1zip.inizip.so/etc/php5/conf.d//usr/lib/php5/extensions/-march=i586 -mtune=i686 -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.suse.de/SUSE:openSUSE:11.1:Update:Test/standard/926377a39ed4811f1ebcbe614a568441-php5cpiolzma2i586i586-suse-linuxFȳpC.詔[?]"k%]:ro1nq1,$4=>hINX[]#1 t?I[Ye=@mdԲImU^cm66RߒJ@pzh<utC0\ьeT2Eϑ6V(䕷42H~SSeL?.-G`Ya=Ԋ/m'`@.VMnlɷw+V%E >rX+rZӝ1.8*kF6 # Z$獌&NO[ޯf=!LNn:S^ h c{R Nhw{'q.6P'=t3~I&Ŏ2D"dK==Te& zE&JRjtC]7H-ARM>D>x: $7r WXSԮeU'E)^C|X\E9[fOJt!$l9"C9w 4q{U]EN#(3 9w4RJ`c;_gc|޷gR%xw#={}>Un1iNz/&L#Q}f+De)PWR9nxz,kOmJ[W=dRr8pwx+”6|,8|GZ?8jpVh1e86Yb)L! @|^ ZRBohQmG%%/u׽֒L0i`@MB/AEɰkn3E_%%`gsQ$S}h.'PR hH8g:V,x Oi DžpZPem[ 8˹"bXH)FCWMm=R$XzYoa|p3HuqRhɖxqHv.:꼅^Bs-fQ5AtA? \QfJ{{@MwQx[G,3M;]{a2<9 Ǻ$R²E=)jS(ˆF *aҾD*Tzh/}V(bRfBi d)EX09S6ȮA> dg6Kq L0l11[i;T9u2!KzNU=9ge?g%tQFtoiiT6)+9y$='ZԌ17 ^z񹾝%cֆp2Ol--Q'8辙5@8\XwA;(s8xE=%,鶹he߽ED"ڃT*ް4|*pٻJC;2&ȁvچfڷ*gi³0)7sgZ 0[fj3_{Хϥ;ɳxo2gpG7>*96R] jw|rG3-ttanXmQ]lZ/3I77Y+Hh M쌘'!>@&]+VVB6$p3MSI ̡Vȿܗ)µaoT͝ƞk AEX&K%uE U HIHuo40q=81%.3=wQW5& DRig掷3hx,Qc`ė/S_+SF*-&!чJKv?ҽ% xsgFvDDO%Y41USzoYF+o-q|#%( EѾ,bf /(aYRG5>%YK!/F*p= d[_@k^_l"T7&- } 82yDˑYX%MUODAHaMVS'=q+t_Y aN~] 8MQ)j$#LuyG7JЄ愳 itR4kSw\N^9cyz$f93ucC_hZ#Bܡ8r(呺im))MzhbLZ8@rw'U%|eX>c=SRDײQǨ vh1#+R}M[D)QͶ9U{T)xdtAq^e ?(HZ/M˱=fy}w֋ۓgL_ހ@ dmXyGV[HffƄao2Tw¿`FTHzfe(l&;TXb*Jc`1992F[ QGhExo] >ĜErІFg5b*yEPy%ssLdSY#72(oH*(jrR T\TNЪ/3uUn+ݿ&c~J9zYM+8͠qa?bb.MwLȃIع <*cP:<.Kd}ӥf 1dʁs%VW5X$ٝpEpSVyՎeÌh~?2TmMɰ47s!Md~ޫr*x[q!GlrIb֩ Amy3jtBdLLei8)+Cα}gHz`r$ޕ}+pK~؍|m |Waz/+(2 XG⛭`y[ρ3H@>Wά+U6ԼE &aa7 tb?53v_ D֔URT䏙n̰?=jU9f9<VB*+bF@u#u\\Ƈ YTF{^]5Pg[SzXmf^no; $'T7sWiRV<9Fpdw.BL9y?F w_n+W!;VƄ!CE2ۗP[D/=T@$e!wS/syZ`2)F _$Nt0Ǧ|t;(ֆ 6)OHl5inX?ٟW^[H4*f0kB>&iwy1/$lTE!FãϓJwgJd̒n|35aN1) N"T$/'u3a.!֣[JgBIZPaP$!a*pCS?M^H/ABKAO c7C<+W)@O+%kV/S_h@ٜSq]TS3~6 ygDeݥUAǗQc,ر{Tkm䐕a#~KPW$Өr٥}yNc`t l:VL!VS@yBHfZq]-tDU[^8 ;98=3McIPd}._o>:f5d 3@U\38nB$2o8SI5#A#阬KژVgM+T0mE:c% 痥7CZ6nn*9v0:=bZ.^EF/mߝ=NaݍN\E_cρra˵V`7%h,h:cM+DEf-fŬeEfS}&AtfS r>B}xЫ}BqezqIysy9e&S￑)I0;בFky#o=4)ps=#ٛFeH25+|+q pIfO !QsP_ɐϷw] ;4|:>{&7jyQZKjD(p7#d\K7q8u_O%T rzt* /lwÝq' }j>X@uE/g~d o@uv 2[v:z|;gwn,)B8*($Wɨ2^@H5!Ъxdܨ(|r0?W {UXLd2yxv[Z^`Y4LHǒwO /-A-ϿAI =* ȿuSTJjMOsl_Wt$F":#\؅YM%ezf)webac)`$ţr);h[¹JAr+˘_fByA/7-G8H%f;\OL0IPMcJlyfU{"˟9|j|Y7mGNCb<-S3 oa{NI[P+9R-3zyd^6‰%: _?=>EgSe cd0Fe!INfPɨs'hGx7^rTdcRX㝾{.jm4.Ԍ*!Mӗ=Ҭ3;=Ook!߄G饭cF89(2nqck؍鵔6a3 V (&Mh'.F`eOaY2cE?< p`(C8\2 "ߤ#z)S#QaaUV뙡JP&I\ ۑ׉lӣUWlrCղ9`Y?{ +ĥ#f ;"р= ebi/տH$Z]N' @?CE!Q4r-~ѽM2_U/W!qufn^ +5.| ~}>׼ڻ\a3其ț fQ6!~h5իGb u\_Xx&f͑5t]:c+!Y4b?pakϱp/q|G^c;@_Fħbb0p U=)a+'3@Ɗle7QSE !@C9I5\E_fD2Hbrs*F x7d$B?s'wPG1H.^\UQ]2Fe{C^>1jEEklDG' &>-F]ߓU: O~Pb! #lz?G Q+cWI`?0Z㠤N§0!ϟAZSRlT%I׌w |^"AxBop44QZE< I:xC@u,qGD\Txk7H9E:Wu}EN7:uwQ iy{ kJ*yC ?t/4D/AWg9c%9sGmJ/MWNrY^T^ËE}'>s50vwY4nϭͼId~ħ9˩.⟹5o0u ?qw-g:i$fli hxVPu;LݰτO7=? q`'psȯkQ{D>ZĶa'F}`}9:}KXΚ@B}-P HFmv7?{^$>_9j mq2Urĝ%,P&EuR[:Cv# oh}W0yKT<$(} (zxI(`dd)% H\놅?I@,D,u@:7IpyOa84zG鬌b3N|'m婼 U D,!g-t=廊ǯ0Idӫ)Ys/rN٪]]43$aѝz4N_A:ű&T'yhr ؊ !:nOKfh;XP P 0-#nHh54IIl)P/^;~ ul(N3W3gdwؘ=@xo@@`5uns/(.Oq;OR$c/6Y=VnHMJZV?pj>6 l#) 9OOPѓSM{".vUw)\ aNm Tc?;eY_sXq>U_W+NWܧ+ү0BAů>u8g4C׻E@ :ǫ[b@%;SOSU?գMs=C;&g/{$v [ajhĪ3ˈ!TV%R|VymG̔FwD,wڊ^'xf,9^tJ.NNVmŁRwTώ:aʼMgUKҭ)'SQ%ZcHL>u,MY9Jo.ncX/@'`_qߗ(, aIيy/Ku_H35OGM%{O!db;VFrݷ7l_hgjKnItœXk\PI-aZq T #Ttlı7Uoa":eav*~5+{&yj0Džϲ;$XP>qᠧ󯴚4Dl\Fc%.yʾ!׸ۂsf^E#Ud5dĽ֍Us) .F+txyr`= 폼5g ́}Rސϑ2 ԒAwX,1+) 'df?O|FU0XmˆC gw$4m#xiYha*PO. NWavbZCk=:20!&P1\Ͽ (u%@үb񯕅J *u >DHSprI%˹STY=YY=ckpEoB1 k3Ohg=Bֶ,# uLFԱ햍:I'0ds1p 챹_Tu&CE=  61U٭CwCٻ4,ƓMQʩj;`Ǭ]@\?d^DG~C!njrNhE:&5UJ\ln=v*EbLgrFJʸ8F🉔b;cU=BKCg-cu ߯dHt2N.w)ŒE Ԟ >-Pʠsu|_3K+/ H"cD[ӷ1jqj%G*/+@P0Iv_teqd sG/]WW#?lfZ6F}$~5)#>8Cw2i.9To%54- l i ȭ7{~ai֘;`D$?jI.L- U m HD~ ;q\n@R}-oypmI9뜝 + q46ʨ)<7~Ag#b΂A4WAhN]íQLDF41YwH"6دf-#Vo{W lee:` نGWAb޳VHcg0]),h2qn*! {xC 5ACOP< h-+T)2$:M ߟE _ʬ;m:|o~ #vB ]ʰ0NBUF*x҉?2 3&[pNJI4qn%-F=k֧W2ba{hЖpv/N|Pky*kb u[:O ԫ,}}F1`xd=0zC-pC \-+3օ?TP2&)^icDN P#-KT{摭ߕ<,kh Ikdϗ#lReKf$(!(Q04+JDV@݌JOҳHh=>qVuC0#E@5Zuys J(?)1-EpV^M5JF@{zIo(1,|t͖#wTekOK[̗lRa7uw8ҵ0EiAp zd K_15 _;K ˆE}D a<'FqMtCk#S QW";@ hXV?(&3h&`y M.;d`3δkec]jwoiI0snY ϥI?.BڬEYgYVoMwG 7?!b-y2Jm7!P%K[BVqXI S0ÌFтGCPsUͷ#cЛe ji|Ш j}pJ3_LBb6+kԥVP^R91UJ;31>Fz;3#dxP}DWH4||R{≖JB/GaBLMHˢJZ MP!2ȍ1;GdYk o!ץ1!Ce"d*ﴹo <cG;K0ѝ*tG0eO+&s#rf,^gɝ.3Ʈ@r<ɝe[q?RÌ}vٞ3h]hylbѠJ?/Jj'Eb1r040]K{4rDȝ[TqRsZ+%cKҊAk9͇ J&_HQI?N W2&5t0B 3{=mu|2[j tҺ>mGlؐ s mGe z\IVxHvF$a[I,&Rv-;L+95tdG-7jR+/& ܌+ $7QK\*I) iʸ-l}q̑oy} vHi盥cuTG{hU4+*8E Wh\;?K@KkDrfW8p[\V,xb׷'y0SY'91/W3171ƲoǙ("u+ T?2.c*Νe3$[afv^`/ڊJg;.`'L+L35!Ax) a -ݗ1hw ʓ)NPU64P\s\o&h"(*\%BH~@* &M?:,].m궬zZv758R>mRrT@yWs֘chZF/M刍~qJ-ζ &)I(]"$zՀ EXږ%V )PXҏ?';1-}LJxeCK: rbMe gzaR^4i&?9ݼ'?[eI"eJUH6iDg?<M<-H.A2ʥb>g)G kڜnj[QOmaj-( Kq]Dh%0efr\d ٻpPD%< fZ`\ zsꉁ'O@iՒ JA]9h7 !aHVDM!LkRnw#"[d$U~^Ff5Er\xiK׵(5W_#tZ@Dbj6ސb\X7FfRm{(pnGK+:Q05seѡopzznqS,0Lf94O+s٨@۶&}!+,w.im%*شJBf&dne.xYoDix[h"( Z|H8AB#;sXY-}ᬿ7ϷՍ)n)t*y*PdZ7DC1%*ۀ$x(ݼ+cZIpr[1Z͌Л<H[ݰ0+cm'U7&@yhtD˖3J ~ڀxVf<}]-f.5[Tsf`V܆>j q.f %B$]H88 |UUeǷ'_!sUrG9yuH$Hj}1/T{6|2~# &Cɠ% yL4'8QMd֚ZAUxɔ#Uϟ}vNRx}襛iKm߽lXtca\FU$t<;vއw8ae7b_Z {w :0@tI#ʗ?:bP.Kxظ6d8*n rh.#.i_`Ϳ [-U )zw-x[AJ ºP3ߍuBvDkRFtv6_,ѦNxĀ1̕yPܩ{neE gDvd͌Mh= U==Y_Q(d~V9,P%(#î LUD=̔=CLP/4_~HHMM3myr\z~Z_Af(e$7ie-6T'+SlwNusƏ~X=ԍ w4WJRXlאj*c #O!OyXWo@9j*6k~-]f\Vry W\( RuY3x?sYF8d ~ RM,.d1P}J|Y"ɐ0| TQbd_6)#'YJ L߂2M;3G23ϳ&Y !LHM)R 1S@|r?3aRԑe" %JFw=C Cz8hèyҷ7T})IyHGemy!ƃ.KKaD3AI[Bj_tu9) YB]$*[)-XfS 2JJ܀-14 nN ltC "+e[ Jo&K;: ƺyOl3WZ"@OD*57&~|ξցL?7Dq@80wL͇ zT,6NvA&` ^ >|ҟTa>P"'|1j~zN)HEv%fqL/M8f b4eonSc6[)&Nj$lwz.yn`+MEjZI%}svnuYglBXI?]LOWHx'9Ͽ`"H"8Yo(-,`<>I斞cnbZ3#'mo ("e3KEtNJO_?jwba.\l,$ʖ 048j.lHT*Z--EP v CBйJk2T>CP; %:>;\=km\ "5ȘR͗cdQSBΩ.L`vPs3?TY13xk7(^ s&LaiR/WqLª˷L9b|NcuM.K18aԡ^2X|^DD#%zȏ_rUVOlL6+ݒd7:I&oI]cY$=ߡV9iz4zLKTq+}`Y<2Q \#5x Qwׁ;m9Ho 7}J(FnH}=' &<6GYN %(CNa D(^0AiU8}J\{| X@ K?dĞZ ;Ј>q+XP #e q5FL9聬W֫~[HȣFAؙۢkWL; MmjQ3NSSLGr? 3r^TgĹrm;aҵfu=h9H*PZJ 7v ~[qaQ_t$KJHN7ǞGxGZ4T>N9V&cr Dg-.agQ-0m)}Oq?<[(]~WZ<,\fxtӖ jz6 XUd+*a>"jFE[]uX5SONnH隩@cyԗ-}=2/{d'Yr>_eK |OC> v<;.Ԩ SG Qp>Sc!C_-.f|9n1aHlb 3VL z n?s7gNS?3" -};,q⋘eHI*45/t?~HTGXG'W6z1`7HUt*oz\5՟k[-Y>zϾr- Vjwv~h,jn',7=T*R'Zһ~byqwш|;Dï~*F%Ry$!uϧҝO8>}y짗 42\{۷eRt\u6另&Dg 0h> & ʨI)} ` ay׬c IDET:n"9BM='tØWY~GX#*7KO~j8YܛYy;u-磊'ywSqVľLFʥVr*#p dVzaC0}t|K2̲_+֛2W[L֝= Q ^uy[6,T5Jz,2)MOqпnւ??;yvodJBU{ Dacz7 #jI֗شp$8ݍY쭙0|TmeWiF' CLm%W ,1ثD8ZL= 1Vua`Z^ ^8v1>`+u. )LNqa6N{ݛ#Fd?c;ʟZȽTֽz^V(PE`B{Sp7z8YQW P~wu`acqI,><R C9荆: Os U2u6K$6j/ۊߤð/]w@k)3-$` y,HBΦD9;LE8x/?fÓ]O_҉}huxw_Svk䋑ez&= k]-bqs-if'rK%ml4+O-䡻E4b` g<ޘ-|6n0VɌޢ-P^x;{ R`Ol(\v[l (258VF]~PTWޟͲ.[!9QqQpk51TF[AU9DBbmH3ǰw0w|d4F7GOnJK2N4ǪhJ;;^ .MCzGαh̰>Sd |(B@abyPXSLQ;0b) U@xY ;֋,Y1J='P d $8 m-#cHlj'>* nlFк8zGRiy,Gz6l@"6w@* n<+%JH p]F8>C(dHlNVŝreOSτԞmɎHK4%T:c!z2 = ѫ m틌ss1jqDAo_@]Gl۪( 6I vt/ DB%g}Tg?*\= '~N9^aɵޝtam(r,-?b[0n}TAV'T|= 6ĽVjBe&T29i/N# ևnGd:kp^ õ<2.F*Ҕ郊 ̖~V6/4{k*Lgi|V k iPެ]}]4i8ZHyB!5Z-~g % -bix)5σA1OȏZlW6x(VA\ى6}nx ErVWQhzEתK/{J^^sOsbdTN󍾗ZK¦쿶\2;3aյ?QP