Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:38834
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain lerdorf.com from 204.11.219.139 cause and error)
Message-ID: <487275E9.4080406@lerdorf.com>
Date: Mon, 07 Jul 2008 13:00:41 -0700
User-Agent: Thunderbird 2.0.0.4 (Macintosh/20070604)
MIME-Version: 1.0
To: Derick Rethans <derick@php.net>
CC: Marcus Boerger <helly@php.net>,
        PHP Developers Mailing List <internals@lists.php.net>
References: <alpine.DEB.0.98.0807070905100.22423@kossu.ez.no> <1073028448.20080707213945@marcus-boerger.de> <alpine.DEB.0.98.0807072143360.30645@kossu.ez.no>
In-Reply-To: <alpine.DEB.0.98.0807072143360.30645@kossu.ez.no>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] PHP 4.4.9
From: rasmus@lerdorf.com (Rasmus Lerdorf)

Derick Rethans wrote:
> On Mon, 7 Jul 2008, Marcus Boerger wrote:
> 
>>   how about this. We edit php_config.h to be version 4.4.8pl1. Then
>> provide a patch for download. All reasonable distributions will pick up
>> that patch anyway. But at least we didn't do a release as we promised, we
>> wouldn't.
> 
> Uh, no. We didn't promise we wouldn't make releases. It clearly says 
> that if there are security issues we look at them case-by-case to see if 
> we should make a release. There are security issues, we make a release. 
> There is nothing more to discuss about this.

We did actually.  The exact text from the announcement was:

   After 2007-12-31 there will be no more releases of PHP 4.4. We will
   continue to make critical security fixes available on a case-by-case
   basis until 2008-08-08.

The two statements do contradict each other a little bit, and I am ok 
with another release, but technically Marcus is correct.

-Rasmus