diff options
| author | BeF | 2022-07-20 12:15:07 +0200 |
|---|---|---|
| committer | GitHub | 2022-07-20 12:15:07 +0200 |
| commit | 2aed4220c2d019cc9b46fec70cfd79d249498e14 (patch) | |
| tree | e7cc3d1d4db617fc5ab1dbcc60f2366407eb5da5 /doc/source/changelog.rst | |
| parent | 72109c9bf016145364b19162a5ff998fc5858a9c (diff) | |
| parent | 75595945d1d868fbd6db743809ca8a3eb5de3113 (diff) | |
Merge pull request #1 from jvoisin/pr1
pr for fetching upstream
Diffstat (limited to 'doc/source/changelog.rst')
| -rw-r--r-- | doc/source/changelog.rst | 74 |
1 files changed, 59 insertions, 15 deletions
diff --git a/doc/source/changelog.rst b/doc/source/changelog.rst index 6eaccd2..a406953 100644 --- a/doc/source/changelog.rst +++ b/doc/source/changelog.rst | |||
| @@ -1,32 +1,76 @@ | |||
| 1 | Changelog | 1 | Changelog |
| 2 | ========= | 2 | ========= |
| 3 | 3 | ||
| 4 | 0.8.0 - Woolly Mammoth | 4 | 0.8.2 - `Surus <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.8.2>`__ 2022/05/20 |
| 5 | ---------------------- | 5 | ------------------------------------------------------------------------------------------- |
| 6 | 6 | ||
| 7 | - Massive simplification of the configuration parser | 7 | Bug fixes |
| 8 | - Better memory management | 8 | ^^^^^^^^^ |
| 9 | - Removal of internal calls to `call_user_func` | 9 | * Fix compilation when ZTS is used |
| 10 | - Check for unsupported PHP version | 10 | * Fix a possible infinite loop |
| 11 | - Compatibility with PHP8.1 | 11 | |
| 12 | - Suhosin features backports: | 12 | |
| 13 | - Maximum stack depth/recursion limit | 13 | 0.8.1 - `Batyr <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.8.1>`__ 2022/05/16 |
| 14 | - Maximum length for session id | 14 | ------------------------------------------------------------------------------------------- |
| 15 | |||
| 16 | Bug fixes | ||
| 17 | ^^^^^^^^^ | ||
| 18 | * Fix the version number | ||
| 19 | * Fix a test on PHP7 | ||
| 20 | |||
| 21 | Breaking Changes | ||
| 22 | ^^^^^^^^^^^^^^^^ | ||
| 23 | * `disable_xxe` is changed to `xxe_protection` | ||
| 24 | |||
| 25 | |||
| 26 | 0.8.0 - `Woolly Mammoth <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.8.0>`__ 2022/05/15 | ||
| 27 | ----------------------------------------------------------------------------------------------------- | ||
| 28 | |||
| 29 | New features | ||
| 30 | ^^^^^^^^^^^^ | ||
| 31 | * Compatibility with PHP8.1 | ||
| 32 | * Check for unsupported PHP version | ||
| 33 | * Backport of Suhosin-ng patches: | ||
| 34 | * Maximum stack depth/recursion limit | ||
| 35 | * Maximum length for session id | ||
| 36 | * $_SERVER strip/encode | ||
| 37 | * Configuration dump | ||
| 38 | * Support for conditional rules | ||
| 39 | * INI settings protection | ||
| 40 | * Output SP logs to stderr | ||
| 41 | * Ported Suhosin rules to SP | ||
| 42 | |||
| 43 | Improvements | ||
| 44 | ^^^^^^^^^^^^ | ||
| 45 | * Massive simplification of the configuration parser | ||
| 46 | * Better memory management | ||
| 47 | * Removal of internal calls to `call_user_func` | ||
| 48 | * Increased portability of the default rules access different version of PHP | ||
| 49 | * Start SP as late as possible, to hook as many things as possible | ||
| 50 | |||
| 51 | Bug fixes | ||
| 52 | ^^^^^^^^^ | ||
| 53 | * XML and Session support are now checked at runtime instead of at compile time | ||
| 15 | 54 | ||
| 16 | 55 | ||
| 17 | 0.7.1 - `Proboscidea <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/08/02 | 56 | 0.7.1 - `Proboscidea <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/08/02 |
| 18 | ------------------------------------------------------------------------------------------------- | 57 | ------------------------------------------------------------------------------------------------- |
| 19 | 58 | ||
| 20 | * Fixed possible memory-leaks when hooking via regular expressions | 59 | Improvements |
| 21 | * Modernise the code by removing usage of `strtok` | 60 | ^^^^^^^^^^^^ |
| 22 | * Prevent a possible crash during configuration reloading | ||
| 23 | * Fix the default rules to catch dangerous `chmod` calls | ||
| 24 | * Improve compatibility with various `libpcre` configurations/versions | 61 | * Improve compatibility with various `libpcre` configurations/versions |
| 62 | * Modernise the code by removing usage of `strtok` | ||
| 25 | * Improve the default rules' compatibility with php8 | 63 | * Improve the default rules' compatibility with php8 |
| 26 | * Prevent XXE in php8 as well | 64 | * Prevent XXE in php8 as well |
| 27 | * Improve a bit the verbosity of the logs | 65 | * Improve a bit the verbosity of the logs |
| 28 | * Add a rules file for php8 | 66 | * Add a rules file for php8 |
| 29 | 67 | ||
| 68 | Bug fixes | ||
| 69 | ^^^^^^^^^ | ||
| 70 | * Prevent a possible crash during configuration reloading | ||
| 71 | * Fix the default rules to catch dangerous `chmod` calls | ||
| 72 | * Fixed possible memory-leaks when hooking via regular expressions | ||
| 73 | |||
| 30 | 74 | ||
| 31 | 0.7.0 - `Los Elefantes <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/01/02 | 75 | 0.7.0 - `Los Elefantes <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/01/02 |
| 32 | --------------------------------------------------------------------------------------------------- | 76 | --------------------------------------------------------------------------------------------------- |
| @@ -46,7 +90,7 @@ Improvements | |||
| 46 | 90 | ||
| 47 | Bug fixes | 91 | Bug fixes |
| 48 | ^^^^^^^^^ | 92 | ^^^^^^^^^ |
| 49 | * The strict mode is now disableable | 93 | * The strict mode can now be disabled |
| 50 | 94 | ||
| 51 | 95 | ||
| 52 | 0.6.0 - `Elephant in the room <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.6.0>`__ 2020/11/06 | 96 | 0.6.0 - `Elephant in the room <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.6.0>`__ 2020/11/06 |
