Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:54792 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 41526 invoked from network); 22 Aug 2011 11:10:59 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 22 Aug 2011 11:10:59 -0000 Authentication-Results: pb1.pair.com header.from=lester@lsces.co.uk; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=lester@lsces.co.uk; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain lsces.co.uk from 213.123.26.187 cause and error) X-PHP-List-Original-Sender: lester@lsces.co.uk X-Host-Fingerprint: 213.123.26.187 c2beaomr09.btconnect.com Received: from [213.123.26.187] ([213.123.26.187:19330] helo=mail.btconnect.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id F2/FB-13024-149325E4 for ; Mon, 22 Aug 2011 07:10:57 -0400 Received: from host81-138-11-136.in-addr.btopenworld.com (EHLO _10.0.0.4_) ([81.138.11.136]) by c2beaomr09.btconnect.com with ESMTP id EBY67234; Mon, 22 Aug 2011 12:08:55 +0100 (BST) Message-ID: <4E5238C7.6040206@lsces.co.uk> Date: Mon, 22 Aug 2011 12:08:55 +0100 User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.19) Gecko/20110420 SUSE/2.0.14-2.2 SeaMonkey/2.0.14 MIME-Version: 1.0 To: PHP internals References: <4E510339.3000609@thelounge.net> <4E51078E.1000401@thelounge.net> <4E520DAC.1090609@oracle.com> <4E5212BD.50306@thelounge.net> <4E52226C.8030400@lsces.co.uk> <4E522A37.6050301@thelounge.net> In-Reply-To: <4E522A37.6050301@thelounge.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Mirapoint-IP-Reputation: reputation=Fair-1, source=Queried, refid=tid=0001.0A0B0302.4E5238C7.0092, actions=tag X-Junkmail-Premium-Raw: score=7/50, refid=2.7.2:2011.8.22.100615:17:7.586, ip=81.138.11.136, rules=__MOZILLA_MSGID, __HAS_MSGID, __SANE_MSGID, __USER_AGENT, __MIME_VERSION, __TO_MALFORMED_2, __BOUNCE_CHALLENGE_SUBJ, __BOUNCE_NDR_SUBJ_EXEMPT, __CT, __CT_TEXT_PLAIN, __CTE, __ANY_URI, __URI_NO_MAILTO, __CP_URI_IN_BODY, BODYTEXTP_SIZE_3000_LESS, BODY_SIZE_1200_1299, __MIME_TEXT_ONLY, RDNS_GENERIC_POOLED, BODY_SIZE_5000_LESS, RDNS_SUSP_GENERIC, RDNS_SUSP, BODY_SIZE_2000_LESS, BODY_SIZE_7000_LESS X-Junkmail-Status: score=10/50, host=c2beaomr09.btconnect.com X-Junkmail-Signature-Raw: score=unknown, refid=str=0001.0A0B020D.4E52393E.0103:SCFSTAT14830815,ss=1,fgs=0, ip=0.0.0.0, so=2010-07-22 22:03:31, dmn=2009-09-10 00:05:08, mode=multiengine X-Junkmail-IWF: false Subject: Re: [PHP-DEV] Failing Autotests / Bugs From: lester@lsces.co.uk (Lester Caine) Reindl Harald wrote: > there should be placed diff-files for security fixes directly on the download-page > they could be easily included in rpmbuild/spec-file if they are matching to the latest > tar.bz2, but the current release process does not support this and forces users > if they wanting their machines as secure as possible to grab in the VCS manually > and hoping make no mistake by making this on their own - it is a hughe difference > for a administrator innclude provided patches in a spec-file or deal with the > whole php-source Actually this is possibly another argument for a properly managed DVCS setup? On other projects I can pick critical commits and apply them, and it flags when other bits need to be implemented as well. Almost does away with the need to produce actual releases, but you do need to differentiate security fixes from simple 'improvements'? -- Lester Caine - G8HFL ----------------------------- Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Workshop - http://medw.co.uk// Firebird - http://www.firebirdsql.org/index.php