search

ulsan1635 / php52-backports

Automatically exported from code.google.com/p/php52-backports
Other
0 stars 0 forks source link

More than year without new patch :( #43

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
So there will be no new all-in-one security patch? I have a problem with 
combinating so much everything :(

Original issue reported on code.google.com by romans.h...@gmail.com on 5 Sep 2014 at 1:01

GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
Wow, thats amazing!

Thank you!

Original comment by romans.h...@gmail.com on 5 Jan 2015 at 9:30

GoogleCodeExporter commented 8 years ago 
Awesome. Thanks as well.

Original comment by zar...@gmail.com on 3 Mar 2015 at 1:42

GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
Thank you NewEraCracker for your improvement patches on php 5.2 and php 5.3
I have fixed 2_php52-improvements-after-backport-20150326.patch so you can use 
it without apply --ignore whitespace option for serialization_objects_009.phpt 
hunk

I attached it Now

Original comment by amigoserv.com on 18 Apr 2015 at 8:56

Attachments:

GoogleCodeExporter commented 8 years ago 
5.3 and 5.2 updates are much appreciated. The 5.3 had some newer entries that 
another person posting patches I found (their last patch was from Jan 2015) so 
this had those that were missing since then.

Original comment by JustinGe...@gmail.com on 22 Apr 2015 at 4:01

GoogleCodeExporter commented 8 years ago 
Thanks NewEraCracker. Latest 5.2 patch working well.

Original comment by zar...@gmail.com on 22 May 2015 at 2:30

GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
I have removed my previous posts as there is no need to keep old versions 
around.

All patches must be applied with the --ignore-whitespace option for correct 
operation.

For PHP 5.2.17, after applying all three backport patches (inside the 7z file), 
you may want to apply Suhosin-Patch I use to harden PHP 5.2 installs. See:
https://github.com/NewEraCracker/suhosin-patches/tree/master/extras
And download "suhosin-patch-5.2.17-0.9.7.2.patch.gz", that is my unofficial 
modification with some small extra bug fixes.

Patches have been tested in CentOS 6.6 (GCC build) and Windows XP (Visual 
Studio 6 build) and test suite finds no extra problems than the ones expected.

That is, for PHP 5.2.17 filesystem functions no longer allow null-bytes and 
date functions have an updated timezone database. This causes those tests to 
fail but is not a reason to be worried.

For PHP 5.3.29, the only test failures happening also happen with an unpatched 
version so it is not a problem with the patches as well.

Regards,
NewEraCracker

Original comment by NewEraCr...@gmail.com on 15 Jul 2015 at 6:40

GoogleCodeExporter commented 8 years ago 
Cool! Thank you!

Original comment by romans.h...@gmail.com on 16 Jul 2015 at 8:36

GoogleCodeExporter commented 8 years ago 
Thanks! @NewEraCracker Be great if you could start a 5.2 & 5.3 Github repo for 
patches. Thanks again.

Original comment by zar...@gmail.com on 30 Jul 2015 at 9:09

GoogleCodeExporter commented 8 years ago 
Backported zend_exceptions.c security fixes from PHP 5.4.43 to PHP 5.3 and PHP 
5.2, this fixes some medium-severity issues.

There have been other low-severity fixes in PHP 5.4.43, but I haven't 
backported those because patches are not directly applicable.

I plan to end-of-life this patches on Sept 2015 as PHP 5.4 will be EOL and 
backporting from even newer PHP versions has too many code differences and the 
process does not justify the effort.

I'll rather upgrade my in-house PHP projects to support the latest versions.

Feel free to contact me via email if you have any problems or issues.

Regards,
NewEraCracker

Original comment by NewEraCr...@gmail.com on 8 Aug 2015 at 8:30

Attachments:

GoogleCodeExporter commented 8 years ago 
Just a little heads up. In my previous comment, when I refer to PHP 5.4.43, I 
actually mean PHP 5.4.44.

Original comment by NewEraCr...@gmail.com on 9 Aug 2015 at 2:23