Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:101956 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 58010 invoked from network); 6 Mar 2018 14:28:56 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Mar 2018 14:28:56 -0000 Authentication-Results: pb1.pair.com smtp.mail=cmbecker69@gmx.de; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=cmbecker69@gmx.de; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmx.de designates 212.227.15.15 as permitted sender) X-PHP-List-Original-Sender: cmbecker69@gmx.de X-Host-Fingerprint: 212.227.15.15 mout.gmx.net Received: from [212.227.15.15] ([212.227.15.15:56191] helo=mout.gmx.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 2A/E2-25693-4A5AE9A5 for ; Tue, 06 Mar 2018 09:28:54 -0500 Received: from [192.168.2.105] ([87.167.204.39]) by mail.gmx.com (mrgmx001 [212.227.17.190]) with ESMTPSA (Nemesis) id 0M39zL-1eaAjO28Zz-00ssT5; Tue, 06 Mar 2018 15:28:49 +0100 To: Anatol Belski , PHP Internals List References: <978fa377-6b03-5053-c544-efa99c08ed06@gmx.de> Message-ID: Date: Tue, 6 Mar 2018 15:28:55 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: de-DE Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:2sJox9GRg+eik/qDs0OhCudMgOK/qtrBSdxEtU8xjv99yz3Om/8 Y17hHRkAEniQ6BUXzzjgSohmw5WJ9yL/nqQ66vZjpQxIRdMp+mt9/TX8FxqoQ3xfMU8VPkb C+FUlEqpnbqTQV7ghLlnVq+cr6ULbkusc78OCL9PEiXfwq5hUN4d8qQUVV/Bnja3V/l5F7s BF4b27v/1Gw2W9AIyKjvw== X-UI-Out-Filterresults: notjunk:1;V01:K0:xGUK9XgQWsY=:1Ak9Sr9UEs8aU8YnuQTMRl Zeq1edf2QYkK5S0YS5N+pvvHo8L3q2bXBszeCceZ1LfsDtBHwrj/B23XVDNO4QDJAZ06iuVyi iK7cxpGNdj3esAGbs6zAS4px+ECmEoi129hRD+TMa00w8MeYfCW8z+4VB0YNY06r9TSsHYPJf wZz6GIIUwVCx+ggo4b0U67vHwBymQ71OXNebs01k+qLxJe1e/esafjI12IJGZt59CtrbJUF8v QCj9PSiyz71V6Kh2rI/Hn0ieBisajDAB2lxhxO9coBj1SXgOm3YpJ68dX0jdo9zO5XKRLPH1U oEAye1L41mojtfzdVOZa9Xq1fTGRPBarZVcnBFSvqcIu6XTzfPq4wsW2FEbfzMDVt3eH108FJ KtsBSxQrEaK5cdoF8Njtt8yBQBgGt14uyx0JnJXEPOcnac27UF9Pvc8rDUy5b6uq/kVvIT6vd aS8IODwjeoF6WmOaeh+f3CoIy5m2dnbadKJyhOpFAOYUabhCB/gqPg4sBJSbWCNAL4Hzcot9J dY2iBd48xjSzcUxWPmsYA78FiP2Ca+SOvK9z2K/Aig4GfkyXjfAbn8K/OQ1YcQfoEnoYuWxpC xzFeihCXYI1By2x6tS4ezIj0yDSW+hYSqIT9qB28XR2a92FhWh0xuQsX0db8Vhi9+tXYPvwxG Yl9X4405iItkA8X6GmZVhWzDaS451l2j6UNKigx6Gpbe9RB2y8PA71a0jfeXEPcSe0KCR8B8C lwZy1TPhRNOH24ztU4tDk2O66OKfN6BMAd2pnY4izCjD4LBk6F4z/zEc0ut/fNxnv8X5V3EPL bPMhG/4+B/EtGA36TjIV0w/z7mQQ4AR8CAdu8r50i1ltGkTHPw= Subject: Re: [PHP-DEV] Status of our bundled liboniguruma From: cmbecker69@gmx.de ("Christoph M. Becker") Hi Anatol! On 01.03.2018 at 10:44, Anatol Belski wrote: > Hi Christoph, > >> -----Original Message----- >> From: Christoph M. Becker [mailto:cmbecker69@gmx.de] >> Sent: Tuesday, February 27, 2018 2:36 PM >> To: PHP Internals List >> Subject: [PHP-DEV] Status of our bundled liboniguruma >> >> Hi! >> >> I noticed that master bundles oniguruma 6.3.0[1], while oniguruma 6.7.1 has >> already been released a month ago[2]. Is there any particular reason not to >> update to the latest oniguruma, or has it just been forgotten? >> >> [1] >> [2] > > 6.3.0 was the last containing CVE fixes which was also backported to PHP 5.6. It was upgraded less than a year ago, since then quite a few versions came out. For 7.3 we could for sure aim at an upgrade to the latest Oniguruma. Some behavior change could be expected according to the release notes, but IMO we'd be fine to try an upgrade before 7.3 starts the pre cycle. Thanks. I've submitted a respective PR (). -- Christoph M. Becker