15 |
# heuristic used by bindir/mysql_config. |
# heuristic used by bindir/mysql_config. |
16 |
%define mysql_config %{_libdir}/mysql/mysql_config |
%define mysql_config %{_libdir}/mysql/mysql_config |
17 |
|
|
18 |
|
%define _default_patch_fuzz 2 |
19 |
|
|
20 |
Summary: PHP scripting language for creating dynamic web sites |
Summary: PHP scripting language for creating dynamic web sites |
21 |
Name: php |
Name: php |
22 |
Version: 5.3.3 |
Version: 5.3.3 |
23 |
Release: 13%{?dist}.1 |
Release: 14%{?dist} |
24 |
License: PHP and LGPLv2 and LGPLv2+ |
License: PHP and LGPLv2 and LGPLv2+ |
25 |
Group: Development/Languages |
Group: Development/Languages |
26 |
URL: http://www.php.net/ |
URL: http://www.php.net/ |
40 |
|
|
41 |
# Fixes for extensions |
# Fixes for extensions |
42 |
Patch20: php-4.3.11-shutdown.patch |
Patch20: php-4.3.11-shutdown.patch |
43 |
|
Patch21: php-5.3.3-zipmemset.patch |
44 |
|
Patch22: php-5.3.3-pdo-overflow.patch |
45 |
|
Patch23: php-5.3.3-pdo-53551.patch |
46 |
|
Patch24: php-5.3.3-fileinfo.patch |
47 |
|
Patch25: php-5.3.3-imap.patch |
48 |
|
Patch26: php-5.3.3-odbc.patch |
49 |
|
|
50 |
# Functional changes |
# Functional changes |
51 |
Patch40: php-5.0.4-dlopen.patch |
Patch40: php-5.0.4-dlopen.patch |
57 |
Patch62: php-5.3.2-testfail.patch |
Patch62: php-5.3.2-testfail.patch |
58 |
|
|
59 |
# Bug fixes |
# Bug fixes |
60 |
Patch100: php-5.3.2-r305570.patch |
Patch100: php-5.3.3-extrglob.patch |
61 |
Patch101: php-5.3.3-r305043.patch |
Patch101: php-5.3.3-varnegidx.patch |
62 |
Patch102: php-5.3.3-varnegidx.patch |
Patch102: php-5.3.3-setdate.patch |
63 |
|
# 103 not needed (no php-fpm) |
64 |
|
Patch104: php-5.3.3-zendgc.patch |
65 |
|
Patch105: php-5.3.3-r305043.patch |
66 |
|
Patch106: php-5.3.3-copy.patch |
67 |
|
Patch107: php-5.3.3-errorhandler.patch |
68 |
|
Patch108: php-5.3.3-bug54268.patch |
69 |
|
|
70 |
# Fixes for security bugs |
# Fixes for security bugs |
71 |
Patch207: php-5.3.2-CVE-2010-3709.patch |
Patch200: php-5.3.2-CVE-2010-3709.patch |
72 |
Patch208: php-5.3.2-CVE-2010-3870.patch |
Patch201: php-5.3.2-CVE-2010-3870.patch |
73 |
Patch209: php-5.3.2-CVE-2010-4645.patch |
Patch202: php-5.3.3-CVE-2010-3710.patch |
74 |
Patch210: php-5.3.3-CVE-2010-3710.patch |
Patch203: php-5.3.2-CVE-2010-4645.patch |
75 |
Patch211: php-5.3.3-CVE-2010-4156.patch |
Patch204: php-5.3.3-CVE-2010-4156.patch |
76 |
Patch212: php-5.3.3-CVE-2011-0708.patch |
Patch205: php-5.3.3-CVE-2011-0708.patch |
77 |
Patch213: php-5.3.3-CVE-2011-1148.patch |
Patch206: php-5.3.3-CVE-2011-1148.patch |
78 |
Patch214: php-5.3.3-CVE-2011-1466.patch |
Patch207: php-5.3.3-CVE-2011-1466.patch |
79 |
Patch215: php-5.3.3-CVE-2011-1468.patch |
Patch208: php-5.3.3-CVE-2011-1468.patch |
80 |
Patch216: php-5.3.3-CVE-2011-1469.patch |
Patch209: php-5.3.3-CVE-2011-1469.patch |
81 |
Patch218: php-5.3.3-CVE-2011-1471.patch |
# 210 not needed (not affected) |
82 |
Patch219: php-5.3.3-CVE-2011-1938.patch |
Patch211: php-5.3.3-CVE-2011-1471.patch |
83 |
Patch220: php-5.3.3-CVE-2011-2202.patch |
Patch212: php-5.3.3-CVE-2011-1938.patch |
84 |
Patch221: php-5.3.3-CVE-2011-2483.patch |
Patch213: php-5.3.3-CVE-2011-2202.patch |
85 |
Patch222: php-5.3.3-CVE-2011-4885.patch |
Patch214: php-5.3.3-CVE-2011-2483.patch |
86 |
Patch223: php-5.3.3-CVE-2011-4566.patch |
Patch215: php-5.3.3-CVE-2011-4885.patch |
87 |
Patch224: php-5.3.3-CVE-2012-0830.patch |
Patch216: php-5.3.3-CVE-2011-4566.patch |
88 |
Patch225: php-5.3.3-CVE-2012-1823.patch |
Patch217: php-5.3.3-CVE-2012-0830.patch |
89 |
Patch226: php-5.3.3-CVE-2012-2336.patch |
Patch218: php-5.3.3-CVE-2012-1823.patch |
90 |
Patch230: php-5.3.3-CVE-2011-4153.patch |
Patch219: php-5.3.3-CVE-2012-2336.patch |
91 |
Patch232: php-5.3.3-CVE-2012-1172.patch |
Patch220: php-5.3.3-CVE-2011-4153.patch |
92 |
Patch233: php-5.3.3-CVE-2012-2143.patch |
# 221 not needed (no php-tidy) |
93 |
Patch234: php-5.3.3-CVE-2012-2386.patch |
Patch222: php-5.3.3-CVE-2012-1172.patch |
94 |
Patch235: php-5.3.3-CVE-2012-0057.patch |
Patch223: php-5.3.3-CVE-2012-2143.patch |
95 |
Patch236: php-5.3.3-CVE-2012-0789.patch |
Patch224: php-5.3.3-CVE-2012-2386.patch |
96 |
Patch237: php-5.3.3-CVE-2010-2950.patch |
Patch225: php-5.3.3-CVE-2012-0057.patch |
97 |
|
Patch226: php-5.3.3-CVE-2012-0789.patch |
98 |
|
Patch227: php-5.3.3-CVE-2010-2950.patch |
99 |
|
Patch228: php-5.3.3-CVE-2012-2688.patch |
100 |
|
Patch229: php-5.3.3-CVE-2012-0831.patch |
101 |
|
Patch230: php-5.3.3-CVE-2011-1398.patch |
102 |
|
Patch231: php-5.3.3-CVE-2013-1643.patch |
103 |
|
Patch232: php-5.3.3-CVE-2006-7243.patch |
104 |
|
Patch233: php-5.3.3-CVE-2013-4113.patch |
105 |
|
Patch234: php-5.3.3-CVE-2013-4248.patch |
106 |
|
Patch235: php-5.3.3-CVE-2013-6420.patch |
107 |
|
|
108 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
109 |
|
|
148 |
Summary: Common files for PHP |
Summary: Common files for PHP |
149 |
Provides: php-api = %{apiver}, php-zend-abi = %{zendver} |
Provides: php-api = %{apiver}, php-zend-abi = %{zendver} |
150 |
Provides: php(api) = %{apiver}, php(zend-abi) = %{zendver} |
Provides: php(api) = %{apiver}, php(zend-abi) = %{zendver} |
151 |
|
Provides: php(language) = %{version} |
152 |
# Provides for all builtin modules: |
# Provides for all builtin modules: |
153 |
Provides: php-bz2, php-calendar, php-ctype, php-curl, php-date, php-exif |
Provides: php-bz2, php-calendar, php-ctype, php-curl, php-date, php-exif |
154 |
Provides: php-ftp, php-gettext, php-gmp, php-hash, php-iconv, php-libxml |
Provides: php-ftp, php-gettext, php-gmp, php-hash, php-iconv, php-libxml |
155 |
Provides: php-reflection, php-session, php-shmop, php-simplexml, php-sockets |
Provides: php-reflection, php-session, php-shmop, php-simplexml, php-sockets |
156 |
Provides: php-spl, php-tokenizer, php-openssl, php-pcre |
Provides: php-spl, php-tokenizer, php-openssl, php-pcre |
157 |
Provides: php-zlib, php-json, php-zip, php-fileinfo |
Provides: php-zlib, php-json, php-zip, php-fileinfo |
158 |
|
Provides: php-core, php-ereg, php-filter, php-phar, php-standard |
159 |
Provides: php53-common = %{version}-%{release}, config(php53-common) = %{version}-%{release} |
Provides: php53-common = %{version}-%{release}, config(php53-common) = %{version}-%{release} |
160 |
|
Obsoletes: php-pecl-json, php-pecl-zip, php-pecl-phar, php-pecl-Fileinfo |
161 |
Obsoletes: php-openssl, php-json |
Obsoletes: php-openssl, php-json |
162 |
# For obsoleted pecl extension |
# For obsoleted pecl extension |
163 |
Provides: php-pecl-json = %{jsonver}, php-pecl(json) = %{jsonver} |
Provides: php-pecl-json = %{jsonver}, php-pecl(json) = %{jsonver} |
404 |
%patch8 -p1 -b .aconf26x |
%patch8 -p1 -b .aconf26x |
405 |
|
|
406 |
%patch20 -p1 -b .shutdown |
%patch20 -p1 -b .shutdown |
407 |
|
%patch21 -p1 -b .zipmemset |
408 |
|
%patch22 -p1 -b .pdooverflow |
409 |
|
%patch23 -p1 -b .pdo53551 |
410 |
|
%patch24 -p1 -b .streams |
411 |
|
%patch25 -p1 -b .imapauth |
412 |
|
%patch26 -p1 -b .pdoodbc |
413 |
|
|
414 |
%patch40 -p1 -b .dlopen |
%patch40 -p1 -b .dlopen |
415 |
%patch41 -p1 -b .easter |
%patch41 -p1 -b .easter |
418 |
%patch61 -p1 -b .tests-wddx |
%patch61 -p1 -b .tests-wddx |
419 |
%patch62 -p1 -b .testfail |
%patch62 -p1 -b .testfail |
420 |
|
|
421 |
%patch100 -p1 -b .r305570 |
%patch100 -p1 -b .extrglob |
422 |
%patch101 -p1 -b .r305043 |
%patch101 -p1 -b .varnegidx |
423 |
%patch102 -p1 -b .varnegidx |
%patch102 -p1 -b .setdate |
424 |
|
|
425 |
%patch207 -p1 -b .cve3709 |
%patch104 -p1 -b .zendgc |
426 |
%patch208 -p1 -b .cve3870 |
%patch105 -p1 -b .r305043 |
427 |
%patch209 -p1 -b .cve4645 |
%patch106 -p1 -b .copy |
428 |
%patch210 -p1 -b .cve3710 |
%patch107 -p1 -b .errorhandler |
429 |
%patch211 -p1 -b .cve4156 |
%patch108 -p1 -b .bug54268 |
430 |
%patch212 -p1 -b .cve0708 |
|
431 |
%patch213 -p1 -b .cve1148 |
%patch200 -p1 -b .cve3709 |
432 |
%patch214 -p1 -b .cve1466 |
%patch201 -p1 -b .cve3870 |
433 |
%patch215 -p1 -b .cve1468 |
%patch202 -p1 -b .cve4645 |
434 |
%patch216 -p1 -b .cve1469 |
%patch203 -p1 -b .cve3710 |
435 |
%patch218 -p1 -b .cve1471 |
%patch204 -p1 -b .cve4156 |
436 |
%patch219 -p1 -b .cve1938 |
%patch205 -p1 -b .cve0708 |
437 |
%patch220 -p1 -b .cve2202 |
%patch206 -p1 -b .cve1148 |
438 |
%patch221 -p1 -b .cve2483 |
%patch207 -p1 -b .cve1466 |
439 |
%patch222 -p1 -b .cve4885 |
%patch208 -p1 -b .cve1468 |
440 |
%patch223 -p1 -b .cve4566 |
%patch209 -p1 -b .cve1469 |
441 |
%patch224 -p1 -b .cve0830 |
%patch211 -p1 -b .cve1471 |
442 |
%patch225 -p1 -b .cve1823 |
%patch212 -p1 -b .cve1938 |
443 |
%patch226 -p1 -b .cve2336 |
%patch213 -p1 -b .cve2202 |
444 |
|
%patch214 -p1 -b .cve2483 |
445 |
%patch230 -p1 -b .cve4153 |
%patch215 -p1 -b .cve4885 |
446 |
%patch232 -p1 -b .cve1172 |
%patch216 -p1 -b .cve4566 |
447 |
%patch233 -p1 -b .cve2143 |
%patch217 -p1 -b .cve0830 |
448 |
%patch234 -p1 -b .cve2386 |
%patch218 -p1 -b .cve1823 |
449 |
%patch235 -p1 -b .cve0057 |
%patch219 -p1 -b .cve2336 |
450 |
%patch236 -p1 -b .cve0789 |
|
451 |
%patch237 -p1 -b .cve2950 |
%patch220 -p1 -b .cve4153 |
452 |
|
%patch222 -p1 -b .cve1172 |
453 |
|
%patch223 -p1 -b .cve2143 |
454 |
|
%patch224 -p1 -b .cve2386 |
455 |
|
%patch225 -p1 -b .cve0057 |
456 |
|
%patch226 -p1 -b .cve0789 |
457 |
|
%patch227 -p1 -b .cve2950 |
458 |
|
%patch228 -p1 -b .cve2688 |
459 |
|
%patch229 -p1 -b .cve0831 |
460 |
|
%patch230 -p1 -b .cve1398 |
461 |
|
%patch231 -p1 -b .cve1643 |
462 |
|
%patch232 -p1 -b .cve7243 |
463 |
|
%patch233 -p1 -b .cve4113 |
464 |
|
%patch234 -p1 -b .cve4248 |
465 |
|
%patch235 -p1 -b .cve6420 |
466 |
|
|
467 |
# Prevent %%doc confusion over LICENSE files |
# Prevent %%doc confusion over LICENSE files |
468 |
cp -p Zend/LICENSE Zend/ZEND_LICENSE |
cp -p Zend/LICENSE Zend/ZEND_LICENSE |
538 |
|
|
539 |
# Fix some bogus permissions |
# Fix some bogus permissions |
540 |
find . -name \*.[ch] -exec chmod 644 {} \; |
find . -name \*.[ch] -exec chmod 644 {} \; |
541 |
|
find . -name \*.cpp -exec chmod 644 {} \; |
542 |
chmod 644 README.* |
chmod 644 README.* |
543 |
|
|
544 |
%build |
%build |
760 |
install -d $RPM_BUILD_ROOT%{_sysconfdir}/rpm |
install -d $RPM_BUILD_ROOT%{_sysconfdir}/rpm |
761 |
# %{SOURCE3} used here -> |
# %{SOURCE3} used here -> |
762 |
sed -e "s/@PHP_APIVER@/%{apiver}/;s/@PHP_ZENDVER@/%{zendver}/;s/@PHP_PDOVER@/%{pdover}/" \ |
sed -e "s/@PHP_APIVER@/%{apiver}/;s/@PHP_ZENDVER@/%{zendver}/;s/@PHP_PDOVER@/%{pdover}/" \ |
763 |
|
-e "s/@PHP_VERSION@/%{version}/" \ |
764 |
< $RPM_SOURCE_DIR/macros.php > macros.php |
< $RPM_SOURCE_DIR/macros.php > macros.php |
765 |
install -m 644 -c macros.php \ |
install -m 644 -c macros.php \ |
766 |
$RPM_BUILD_ROOT%{_sysconfdir}/rpm/macros.php |
$RPM_BUILD_ROOT%{_sysconfdir}/rpm/macros.php |
842 |
%files process -f files.process |
%files process -f files.process |
843 |
|
|
844 |
%changelog |
%changelog |
845 |
* Wed Aug 22 2012 Shad L. Lords <slords@mail.com> - 5.3.3-13.sme.1 |
* Mon Dec 16 2013 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-14.sme |
846 |
- Add php53-* provides to provide compatibility |
- Resync with upstream php53, which include: |
847 |
|
- add security fix for CVE-2013-6420 |
848 |
|
- add security fix for CVE-2013-4248 |
849 |
|
- add upstream reproducer for error_handler (#951075) |
850 |
|
- add security fixes for CVE-2006-7243 |
851 |
|
- add security fixes for CVE-2012-2688, CVE-2012-0831, |
852 |
|
CVE-2011-1398, CVE-2013-1643 |
853 |
|
- fix segfault in error_handler with |
854 |
|
allow_call_time_pass_reference = Off (#951075) |
855 |
|
- fix double free when destroy_zend_class fails (#951076) |
856 |
|
- fix possible buffer overflow in pdo_odbc (#869694) |
857 |
|
- php script hangs when it exceeds max_execution_time |
858 |
|
when inside an ODBC call (#864954) |
859 |
|
- fix zend garbage collector (#892695) |
860 |
|
- fix transposed memset arguments in libzip (#953818) |
861 |
|
- fix possible segfault in pdo_mysql (#869693) |
862 |
|
- fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859369) |
863 |
|
- fix stream support in fileinfo (#869697) |
864 |
|
- fix setDate when DateTime created from timestamp (#869691) |
865 |
|
- fix permission on source files (#869688) |
866 |
|
- add php(language) and missing provides (#837044) |
867 |
|
- |
868 |
|
- fix copy doesn't report failure on partial copy (#951413) |
869 |
|
|
870 |
* Fri Jun 29 2012 Shad L. Lords <slords@mail.com> - 5.3.3-13.sme |
* Mon Jul 15 2013 Shad L. Lords <slords@mail.com> - 5.3.3-13.sme.2 |
871 |
|
- Add php53-* provides to provide compatibility |
872 |
- Obsolete php-domxml and php-dom [SME: 6733] |
- Obsolete php-domxml and php-dom [SME: 6733] |
873 |
- Update Obsoletes and Conflicts [SME: 6436] |
- Update Obsoletes and Conflicts [SME: 6436] |
874 |
|
|
875 |
|
* Fri Jul 12 2013 Remi Collet <rcollet@redhat.com> - 5.3.3-13.1 |
876 |
|
- add security fix for CVE-2013-4113 |
877 |
|
|
878 |
* Mon Jun 25 2012 Joe Orton <jorton@redhat.com> - 5.3.3-13 |
* Mon Jun 25 2012 Joe Orton <jorton@redhat.com> - 5.3.3-13 |
879 |
- add security fix for CVE-2010-2950 |
- add security fix for CVE-2010-2950 |
880 |
|
|