From c0e72a25f32e4916ac5eda8cb47888fd0a200b23 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Sun, 15 May 2022 18:07:23 +0200 Subject: Bump the changelog --- debian/changelog | 22 ++++++++++++++++++++ doc/source/changelog.rst | 52 ++++++++++++++++++++++++++++++++++-------------- src/php_snuffleupagus.h | 2 +- 3 files changed, 60 insertions(+), 16 deletions(-) diff --git a/debian/changelog b/debian/changelog index 51ca43d..831a0f2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,25 @@ +snuffleupagus (0.8.0) UNRELEASED; urgency=low + [ jvoisin ] + * Compatibility with PHP8.1 + * Check for unsupported PHP version + * Backport of Suhosin-ng patches: + * Maximum stack depth/recursion limit + * Maximum length for session id + * $_SERVER strip/encode + * Configuration dump + * Support for conditional rules + * INI settings protection + * Output SP logs to stderr + * Ported Suhosin rules to SP + * Massive simplification of the configuration parser + * Better memory management + * Removal of internal calls to `call_user_func` + * Increased portability of the default rules access different version of PHP + * Start SP as late as possible, to hook as many things as possible + * XML and Session support are now checked at runtime instead of at compile time + + -- jvoisin Sun, 15 Apr 2022 18:00:00 +0200 + snuffleupagus (0.7.1) UNRELEASED; urgency=low [ jvoisin ] * Fixed possible memory-leaks when hooking via regular expressions diff --git a/doc/source/changelog.rst b/doc/source/changelog.rst index 6eaccd2..a69ec20 100644 --- a/doc/source/changelog.rst +++ b/doc/source/changelog.rst @@ -1,32 +1,54 @@ Changelog ========= -0.8.0 - Woolly Mammoth ----------------------- +0.8.0 - `Woolly Mammoth` `__ 2022/05/15 +----------------------------------------------------------------------------------------------------- -- Massive simplification of the configuration parser -- Better memory management -- Removal of internal calls to `call_user_func` -- Check for unsupported PHP version -- Compatibility with PHP8.1 -- Suhosin features backports: - - Maximum stack depth/recursion limit - - Maximum length for session id +New features +^^^^^^^^^^^^ +* Compatibility with PHP8.1 +* Check for unsupported PHP version +* Backport of Suhosin-ng patches: + * Maximum stack depth/recursion limit + * Maximum length for session id + * $_SERVER strip/encode + * Configuration dump + * Support for conditional rules + * INI settings protection + * Output SP logs to stderr + * Ported Suhosin rules to SP + +Improvements +^^^^^^^^^^^^ +* Massive simplification of the configuration parser +* Better memory management +* Removal of internal calls to `call_user_func` +* Increased portability of the default rules access different version of PHP +* Start SP as late as possible, to hook as many things as possible + +Bug fixes +^^^^^^^^^ +* XML and Session support are now checked at runtime instead of at compile time 0.7.1 - `Proboscidea `__ 2021/08/02 ------------------------------------------------------------------------------------------------- -* Fixed possible memory-leaks when hooking via regular expressions -* Modernise the code by removing usage of `strtok` -* Prevent a possible crash during configuration reloading -* Fix the default rules to catch dangerous `chmod` calls +Improvements +^^^^^^^^^^^^ * Improve compatibility with various `libpcre` configurations/versions +* Modernise the code by removing usage of `strtok` * Improve the default rules' compatibility with php8 * Prevent XXE in php8 as well * Improve a bit the verbosity of the logs * Add a rules file for php8 +Bug fixes +^^^^^^^^^ +* Prevent a possible crash during configuration reloading +* Fix the default rules to catch dangerous `chmod` calls +* Fixed possible memory-leaks when hooking via regular expressions + 0.7.0 - `Los Elefantes `__ 2021/01/02 --------------------------------------------------------------------------------------------------- @@ -46,7 +68,7 @@ Improvements Bug fixes ^^^^^^^^^ -* The strict mode is now disableable +* The strict mode can now be disabled 0.6.0 - `Elephant in the room `__ 2020/11/06 diff --git a/src/php_snuffleupagus.h b/src/php_snuffleupagus.h index 8dc7ccb..e40b31b 100644 --- a/src/php_snuffleupagus.h +++ b/src/php_snuffleupagus.h @@ -1,7 +1,7 @@ #ifndef PHP_SNUFFLEUPAGUS_H #define PHP_SNUFFLEUPAGUS_H -#define PHP_SNUFFLEUPAGUS_VERSION "0.8.0" +#define PHP_SNUFFLEUPAGUS_VERSION "0.9.0" #define PHP_SNUFFLEUPAGUS_EXTNAME "snuffleupagus" #define PHP_SNUFFLEUPAGUS_AUTHOR "NBS System & Julien (jvoisin) Voisin & SektionEins GmbH" #define PHP_SNUFFLEUPAGUS_URL "https://github.com/jvoisin/snuffleupagus" -- cgit v1.3