Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:54786
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain thelounge.net designates 91.118.73.15 as permitted sender)
Message-ID: <4E522A37.6050301@thelounge.net>
Date: Mon, 22 Aug 2011 12:06:47 +0200
Organization: the lounge interactive design
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:6.0) Gecko/20110816 Thunderbird/6.0
MIME-Version: 1.0
To: internals@lists.php.net
References: <4E510339.3000609@thelounge.net> <CAEZPtU7+QBPFWVk7iZ5RfU6b999zNNe1wpX-5Lv7gOpvCpepsQ@mail.gmail.com> <4E51078E.1000401@thelounge.net> <CAEZPtU7WKucxQ-Nus+2JGCXutKrqfKETVH8d=uz237itxxq6Ww@mail.gmail.com> <4E520DAC.1090609@oracle.com> <4E5212BD.50306@thelounge.net> <CAEZPtU4W7H92GYEdUHpsiZXxmUkQa+GsfoO25DKqP4dGmWzRSQ@mail.gmail.com> <4E52226C.8030400@lsces.co.uk>
In-Reply-To: <4E52226C.8030400@lsces.co.uk>
OpenPGP: id=7F780279;
	url=http://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enigA3A231864A4BC441C874A842"
Subject: Re: [PHP-DEV] Failing Autotests / Bugs
From: h.reindl@thelounge.net (Reindl Harald)

--------------enigA3A231864A4BC441C874A842
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable



Am 22.08.2011 11:33, schrieb Lester Caine:
> Pierre Joye wrote:
>> but does it work with 5.3.6? On the servers where 5.3.7 fails?
>=20
> While switching back should simply be a matter of telling the package m=
anager to use the older version

with full disclosed security-bugs they are open and known for months
before even a new version is released

> there should perhaps be a little less 'rush' to automatically update sy=
stems,=20
> allowing us to make a choice when we do upgrade?

we have the choice but we have not because it takes months before a new p=
hp-version
is available and the whole time before security-bugs are well known every=
where

there should be placed diff-files for security fixes directly on the down=
load-page
they could be easily included in rpmbuild/spec-file if they are matching =
to the latest
tar.bz2, but the current release process does not support this and forces=
 users
if they wanting their machines as secure as possible to grab in the VCS m=
anually
and hoping make no mistake by making this on their own - it is a hughe di=
fference
for a administrator innclude provided patches in a spec-file or deal with=
 the
whole php-source

Patch8:            php-5.3.7-aconf259.patch
Patch20:           php-4.3.11-shutdown.patch
Patch21:           php-5.3.3-macropen.patch
Patch22:           php-5.3.7-crypt.patch
Patch40:           php-5.0.4-dlopen.patch
Patch41:           php-5.3.0-easter.patch
Patch42:           php-5.3.1-systzdata-v7.patch
Patch43:           php-5.3.4-phpize.patch
Patch61:           php-5.0.4-tests-wddx.patch
Patch62:           php-5.3.3-tests.patch
Patch91:           php-5.3.7-oci8conf.patch
Patch92:           php-5.3.7-readline.patch
Patch93:           php-5.3.6-mysqli.patch



--------------enigA3A231864A4BC441C874A842
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5SKjgACgkQhmBjz394Anl9CwCfSncohRX3VHlWnpCsjLGqFWmv
QlMAnAoMsDtN4GA4F6mi+Kc0/o/vFKaT
=Q7N9
-----END PGP SIGNATURE-----

--------------enigA3A231864A4BC441C874A842--