Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:81799 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 84332 invoked from network); 4 Feb 2015 09:56:29 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 4 Feb 2015 09:56:29 -0000 X-Host-Fingerprint: 80.177.120.119 marston-home.demon.co.uk Received: from [80.177.120.119] ([80.177.120.119:3120] helo=localhost.localdomain) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id DD/36-55046-CCCE1D45 for ; Wed, 04 Feb 2015 04:56:29 -0500 Message-ID: To: internals@lists.php.net References: <54D1BC7D.5000504@gmail.com><54D1C59C.5070008@gmail.com> In-Reply-To: Date: Wed, 4 Feb 2015 09:56:23 -0000 Lines: 2 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="utf-8"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Newsreader: Microsoft Windows Live Mail 16.4.3528.331 X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331 X-Posted-By: 80.177.120.119 Subject: Re: [PHP-DEV] [RFC][VOTE] Removal of dead or not yet PHP7 ported SAPIs and extensions From: TonyMarston@hotmail.com ("Tony Marston") "Pierre Joye" wrote in message news:CAEZPtU6au_Fi2bW=E2kiQLErq4h97VhU8NkL-Z9KatLsteFaRQ@mail.gmail.com... > >On Wed, Feb 4, 2015 at 2:09 PM, Stanislav Malyshev >wrote: >> Hi! >> >>> Libmcrypt is a dead cow but not much of a threat for now. On the other >>> hand cclient is dangerous, it should have been removed long time ago >>> already. >> >> I'm not sure - what is the dangerous part? Are you referring to some >> published CVEs or other reports? Then it would be useful to list them >> here and on the RFC. > >I have to dig back (or may be in the last threads where we discussed >that). I will try to to post them here (RFC is in voting phase so no >edition) asap. > >However, I totally fail to understand your reasoning. We know both >libraries are dead. ext/Imap is almost not used anymore Excuse me, but *I* use ext/imap quite extensively, and I would be most upset if you dropped it without providing an alternative. I would also be upset if you dropped it without ever it ever being marked as deprecated. -- Tony Marston