Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:46732
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain ilia.ws designates 209.85.221.195 as permitted sender)
Message-ID: <4B4F138B.5000909@prohost.org>
Date: Thu, 14 Jan 2010 07:52:27 -0500
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.5) Gecko/20091223 Lightning/1.0b2pre Thunderbird/3.0
MIME-Version: 1.0
To: internals@lists.php.net
CC: geissert@debian.org
References: <hiin70$8s6$1@ger.gmane.org> <20100113154657.GA7177@panix.com> <hiku6l$25v$1@ger.gmane.org>
In-Reply-To: <hiku6l$25v$1@ger.gmane.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV]  5.3 release schedule and other bits
From: ilia@ilia.ws (Ilia Alshanetsky)

Each distribution can definitely apply different patches, but in the
case of at least one, improper application or "adjustement" of the patch
can lead to security holes by itself.

On 10-01-13 12:00 PM, Raphael Geissert wrote:
> Daniel Convissor wrote:
>
>   
>> Hi Raphael:
>>
>> On Tue, Jan 12, 2010 at 02:48:38PM -0600, Raphael Geissert wrote:
>>     
>>> As a first step I'll be trying to forward most of our
>>> patches so that there's a minor divergence.
>>>       
>> Is there a document somewhere that explains the changes the Debian team
>> has made?  (Other than reading a 600 kb diff file from the package web
>> page.)
>>
>>     
> What patch do you want to know more about?
>
> Patches have not been properly documented, but they are usually referenced 
> by an entry on the changelog giving a bit more information.
>
> You can browse the patches applied to every release (and download or view 
> them individually) at:
> http://patch-tracker.debian.org/package/php5
>
> Cheers,
>