Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:77607 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 30548 invoked from network); 25 Sep 2014 07:22:35 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 25 Sep 2014 07:22:35 -0000 Authentication-Results: pb1.pair.com header.from=remi@fedoraproject.org; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=remi@fedoraproject.org; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain fedoraproject.org from 217.70.183.197 cause and error) X-PHP-List-Original-Sender: remi@fedoraproject.org X-Host-Fingerprint: 217.70.183.197 relay5-d.mail.gandi.net Linux 2.6 Received: from [217.70.183.197] ([217.70.183.197:35200] helo=relay5-d.mail.gandi.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 39/D2-06184-8B2C3245 for ; Thu, 25 Sep 2014 03:22:33 -0400 Received: from mfilter4-d.gandi.net (mfilter4-d.gandi.net [217.70.178.134]) by relay5-d.mail.gandi.net (Postfix) with ESMTP id 42BA341C06F for ; Thu, 25 Sep 2014 09:22:30 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter4-d.gandi.net Received: from relay5-d.mail.gandi.net ([217.70.183.197]) by mfilter4-d.gandi.net (mfilter4-d.gandi.net [10.0.15.180]) (amavisd-new, port 10024) with ESMTP id TKYvDrnzH73N for ; Thu, 25 Sep 2014 09:22:28 +0200 (CEST) X-Originating-IP: 82.241.130.121 Received: from schrodingerscat.famillecollet.com (pom51-2-82-241-130-121.fbx.proxad.net [82.241.130.121]) (Authenticated sender: contact@ll-experts.com) by relay5-d.mail.gandi.net (Postfix) with ESMTPSA id B6B1441C07A for ; Thu, 25 Sep 2014 09:22:28 +0200 (CEST) Message-ID: <5423C2B4.8030706@fedoraproject.org> Date: Thu, 25 Sep 2014 09:22:28 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.1.1 MIME-Version: 1.0 To: PHP Internals References: <541C5EB5.6090001@fedoraproject.org> <5423BD7F.5070800@sugarcrm.com> In-Reply-To: <5423BD7F.5070800@sugarcrm.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] Re: OpenSSL bug in 5.4.33 and 5.5.17 From: remi@fedoraproject.org (Remi Collet) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Le 25/09/2014 09:00, Stas Malyshev a =C3=A9crit : > Hi! Hi, >> After a quick check Too quick, I miss 84a4041 ;) >> 6569db8 and 32be79d are in 5.4.33 / 5.5.17 / 5.6.1RC1 f86b219 >> and 3728449 are in 5.6.1RC1 only >=20 > So, for 5.4 should we revert 6569db8 and 32be79d then? What about=20 > upmerging to 5.5? What about f86b2193, should this be reverted > too? I'm feeling I don't understand what is going on there > completely. >=20 In released 5.4.33 (and 5.5.17) you have 6569db8 + 84a4041 + 32be79d (notice I have revert these 3 patches for downstream) =09 In 5.4/5.5/5.6 you have 6569db8 + 84a4041 + 32be79d + f86b219 + 3728449 (all reverted in 5.6.1) As you said, "5.4 is now supposed to be security-only" so I rather think we should revert to 5.4.32 code and have the upcoming fix only in 5.5+ (so in 5.5.18RC and 5.6.2RC) Remi. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlQjwrQACgkQYUppBSnxahj+lACgidyKYuSFEodjJ8sZf0+uOFLp Qt4An0zVL1DRvOB6nhVdBTbXwZrG4kIi =3D83AV -----END PGP SIGNATURE-----