• Files Changed
• Browse Source

- update to 1.12.20
  - ZF2016-03: The implementation of ORDER BY and GROUP BY in Zend_Db_Select
    remained prone to SQL injection when a combination of SQL expressions and
    comments were used. This release provides a comprehensive solution that
    identifies and removes comments prior to checking validity of the statement to
    ensure no SQLi vectors occur. We advise always filtering user input prior to
    invoking these methods, however, to further protect your applications.

• Files Changed
• Browse Source

update to 1.12.19,
security and bugfix release

• Files Changed
• Browse Source

initialized devel package after accepting 359635

• Files Changed
• Browse Source

ZendFramework requires php 5.2.11+, not version 5.3

• Files Changed
• Browse Source

Fixed dependency again: php5-memcached

• Files Changed
• Browse Source

Fixed dependency: cache-backend-memcached requires php5-memcache instead of php5-pecl-memcache

• Files Changed
• Browse Source

- Build the APC-cache only when PHP < 5.5
- Include the extras package directly from source as it's no longer included in
  the main package. Version of the extras-package is not the best, as it is
  aligned to the main package
- Update to 1.12.17. Changes in this version:
  - 638: Fixes null byte tests in Zend_Db_Adapter_Pdo
  - 632: Updates the TLD list for Zend_Validate_Hostname to version 2015102801
  SECURITY UPDATES
  - ZF2015-09: Zend_Captcha_Word generates a "word" for a CAPTCHA challenge by
    selecting a sequence of random letters from a character set. Prior to this
    version, the selection was performed using PHP's internal array_rand()
    function. This function does not generate sufficient entropy due to its 
    usage of rand() instead of more cryptographically secure methods such as
    openssl_pseudo_random_bytes(). This could potentially lead to information
    disclosure should an attacker be able to brute force the random number
    generation. This release updates Zend_Crypt_Math to provide
    cryptographically secure RNG, and updates Zend_Captcha_Word to use these
    new facilities.

• Files Changed
• Browse Source

- Update to 1.12.16. Changes in this version:
  - #504: Cannot parse huge documents in Zend_Dom_Query
  - #599: Wrong return type in DocBlock of Zend_Console_Getopt::getOption()
  - #600: Undefined property $config in Zend_Http_Client_Adapter_Curl
  - #604: add doccomments to Zend_Log covering its magic methods
  - #606: Fix typo in Zend_Cache-Backends documentation.
  - #610: Add ß (Latin small letter sharp s) to .de domain IDNA check
  - #612: Zend_Validate_Hostname does not validate NTP hostnames 
          starting with '0' character
  SECURITY UPDATES
  - ZF2015-07: A number of components, including Zend_Cloud, Zend_Search_Lucene,
    and Zend_Service_WindowsAzure were creating directories with a liberal
    umask that could lead to local arbitrary code execution and/or local
    privilege escalation. This release contains a patch that ensures the
    directories are created using permissions of 0775 and files using 0664
    (essentially umask 0002).
  - ZF2015-08: ZF2014-06 uncovered an issue in the sqlsrv adapter provided
    by the framework whereby null bytes were not filtered correctly when
    generating SQL. A reporter discovered the same vulnerability is present
    in our PDO implementation when used with pdo_dblib, and could potentially
    be applied to other PDO adapters. This release contains a patch to properly
    escape null bytes used in SQL queries across all PDO adapters shipped
    with the framework.

• Files Changed
• Browse Source

Update to 1.12.15

• Files Changed
• Browse Source

* Version 1.12.11
* Updated PHP-version dependencies (5.2.11+)
* Defined download addresses
* Formatted spec with the new spec-cleaner

• Files Changed
• Browse Source

New upstream release

• Files Changed
• Browse Source

New upstream release 1.12.6

• Files Changed
• Browse Source

adapted for SLES11 and RedHad.

SLES11 only provides PHP packages like
php53-curl, so requiring php5-curl does not match.
However, all packages also provide php-*, like php-curl.
Adapted this spec file accordingly.
Also distinguish between SUSE and non-SUSE systems, to be able to build for RHEL.

• Files Changed
• Browse Source

- New upstream release 1.12.3
  * http://framework.zend.com/changelog/1.12.3/
  * http://framework.zend.com/changelog/1.12.2/
- Removed build-tools.tar.bz2 and autoconf_manual.tar.gz (not needed)
- Removed rpmlintrc from spec (no need to mention it in spec)
- Enabled Db-Adapter-Firebird package
- Removed (Build)Requires for php5-sqlite and php5-xmlreader

• Files Changed
• Browse Source

Improved spec (fdupes, dos2unix, shebang)

• Files Changed
• Browse Source

update to latest point release and save on buil dhost resources by building manual for 11.3+ using PHD.

• Files Changed
• Browse Source

generated via source service

• Files Changed
• Browse Source

• Files Changed
• Browse Source

generated via source service

• Files Changed
• Browse Source