Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Ilya Barygin
Revision Date: 2012-06-30 13:04:44 UTC

No-change rebuild for phpapi change

Author: Jan Wagner
Revision Date: 2012-01-24 23:09:33 UTC

* New upstream version (Closes: #657190, #631283)
  - Fixed stack based buffer overflow in transparent cookie encryption
  - Fixed environment variables for logging do not go through the filter
    extension anymore
  - Fixed that disabling HTTP response splitting protection also disabled
    NUL byte protection in HTTP headers
  - Removed crypt() support - because not used for PHP >= 5.3.0 anyway
* Update watch file, upstream changed naming scheme

Author: Jan Wagner
Revision Date: 2010-08-19 10:02:52 UTC

* New upstream version (Closes: #584509)
  - Improved random number seed generation more by adding /dev/urandom juice
  - Fixed missing header file resulting in wrong php_combined_lcg() prototype
    being used
  - Added support for memory_limit > 2GB
  - Fixed missing header file resulting in compile errors
* Drop 10_fix_function_prototype, integrated upstream
* Update watch file
* Bump standards version to 3.9.1, no changes needed

Author: Jan Wagner
Revision Date: 2010-08-19 10:02:52 UTC

* New upstream version (Closes: #584509)
  - Improved random number seed generation more by adding /dev/urandom juice
  - Fixed missing header file resulting in wrong php_combined_lcg() prototype
    being used
  - Added support for memory_limit > 2GB
  - Fixed missing header file resulting in compile errors
* Drop 10_fix_function_prototype, integrated upstream
* Update watch file
* Bump standards version to 3.9.1, no changes needed

Author: Jan Wagner
Revision Date: 2010-04-13 13:42:29 UTC

* New upstream version
  - Added line ending characters %0a and %0d to the list of dangerous
    characters handled by suhosin.server.encode and suhosin.server.strip
  - Fixed crash bug with PHP 5.3.x and session module (due to changed session
    globals struct)
  - Added ! protection to PHP session serializer
  - Fixed simulation mode now also affects (dis)allowed functions
  - Fixed missing return (1); in random number generator replacements
  - Fixed random number generator replacement error case behaviour in PHP
    5.3.x
  - Fixed error case handling in function_exists() PHP 5.3.x
  - Merged changes/fixes in import_request_variables()/extract() from upstream
    PHP
  - Fixed suhosin_header_handler to be PHP 5.3.x compatible
  - Merge fixes and new features of PHP's file upload code to suhosin
  - Fix ZTS build of session.c
  - Increased session identifier entropy by using /dev/urandom if available
* Install upstream suhosin.ini into /usr/share/doc/php5-suhosin/examples/
* Add dpatch build-infrastructure
* Add 10_fix_function_prototype.dpatch, to fix function prototype, thanks
  Stefan Esser (Closes: #539307)

Author: Chuck Short
Revision Date: 2010-03-02 12:55:10 UTC

Rebuild for PHP 5.3.

Author: Jan Wagner
Revision Date: 2008-06-18 15:16:33 UTC

* new upstream release (closes: #497871)
* declare license situation of execute.c in copyright file

Author: Jan Wagner
Revision Date: 2008-06-18 13:46:15 UTC

* new upstream release
* bump copyright of packaging to 2008 and remove trailing whitespaces
* Updating standards version to 3.8.0, no changes needed

Author: Alexander Wirt
Revision Date: 2007-12-06 10:53:43 UTC

[ Jan Wagner ]
* new upstream release (closes: #454382)

  - Removed LFS warning message because it crashed on several systems
  - Fixed function_exists() now checks the Suhosin permissions
  - Fixed crypt() salt no longer uses Blowfish by default
  - Fixed .htaccess/perdir support
  - Fixed compilation problem on OS/X
  - Added protection against some attacks through _SERVER variables
  - Added suhosin.server.strip and suhosin.server.encode
  - Added error message that warns about the LFS binary incompatibility

* added Vcs- fields, moved Homepage into source header's field
* add watch file

[ Alexander Wirt ]
* Bump standards version
* Don't ignore errors from make clean
* Update copyright file

Author: Jan Wagner
Revision Date: 2007-05-23 09:04:18 UTC

* new upstream
* remove php4-suhosin (closes: #418321).
* ship suhosin.ini with the implizit default values

Author: Michael Bienia
Revision Date: 2007-03-13 23:43:54 UTC

* Don't build a php4 module anymore.
* debian/control: Change Maintainer/XSBC-Original-Maintainer field.

Author: Alexander Wirt
Revision Date: 2009-08-14 08:09:56 UTC

* New upstream version
  - Fixed crash bug with PHP 5.2.10 caused by a
    change in extension load order of ext/session
    (Closes: #538820)