Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:122828
Content-Type: multipart/alternative;
 boundary="------------ao669PetNOMu64OBlr9SWUTf"
Message-ID: <1c7bcd0e-4e32-480f-acd2-2c8eb049bde2@gmail.com>
Date: Sat, 30 Mar 2024 16:35:42 +0100
Precedence: bulk
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [PHP-DEV] Consider removing autogenerated files from tarballs
To: internals@lists.php.net
References: <AM8P250MB01705B564C0F9B2F460F56B0E2392@AM8P250MB0170.EURP250.PROD.OUTLOOK.COM>
 <9008050F-4EE1-4E19-B513-654602E118A7@benramsey.com>
 <3d90e236-49d8-4f80-a6dd-3584267a83e3@php.net>
 <586c3320-b38b-47bb-9c06-6762f1eb242b@gmail.com>
 <cc1e1415-a4cd-4bb2-99f0-e5b05ef6582c@gmail.com>
 <CAEKnhAEMAmgoFmgCPOnV_0sxpaB5SNwRo-qFcE_YeLSduq+bHg@mail.gmail.com>
Content-Language: en-US
In-Reply-To: <CAEKnhAEMAmgoFmgCPOnV_0sxpaB5SNwRo-qFcE_YeLSduq+bHg@mail.gmail.com>
From: daniil.gentili@gmail.com (Daniil Gentili)

This is a multi-part message in MIME format.
--------------ao669PetNOMu64OBlr9SWUTf
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit


> That would break lots of tools as it requires extra dependencies so it 
> is not something that would could in stable versions.

Btw, I do not believe that "it would require end users to install 
autotools and bison in order to compile PHP from tarballs" is valid 
reason to delay the patching of a serious attack vector ASAP.


Regards,

Daniil Gentili.

--------------ao669PetNOMu64OBlr9SWUTf
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <br>
    <blockquote type="cite"
cite="mid:CAEKnhAEMAmgoFmgCPOnV_0sxpaB5SNwRo-qFcE_YeLSduq+bHg@mail.gmail.com">
      <div dir="ltr">
        <div class="gmail_quote">
          <div>That would break lots of tools as it requires extra
            dependencies so it is not something that would could in
            stable versions.</div>
        </div>
      </div>
    </blockquote>
    <p>Btw, I do not believe that "it would require end users to install
      autotools and bison in order to compile PHP from tarballs" is
      valid reason to delay the patching of a serious attack vector
      ASAP.</p>
    <p><br>
    </p>
    <p>Regards,</p>
    <p>Daniil Gentili.<br>
    </p>
  </body>
</html>

--------------ao669PetNOMu64OBlr9SWUTf--