Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:86784
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.212.180 as permitted sender)
MIME-Version: 1.0
Sender: julienpauli@gmail.com
Date: Mon, 22 Jun 2015 14:09:41 +0200
Message-ID: <CAMUwpuRuHHuXr0WUJRfzmOYTOizgpB=2_mQY7RhCLP_=TcSRYg@mail.gmail.com>
To: PHP Internals <internals@lists.php.net>, Ferenc Kovacs <tyrael@php.net>, 
	Stanislav Malyshev <stas@php.net>, Kalle Sommer Nielsen <kalle@php.net>, Pierre Joye <pajoye@php.net>, 
	David Soria Parra <dsp@php.net>, Anatol Belsky <ab@php.net>
Content-Type: multipart/alternative; boundary=001a11c261a461a59805191a283f
Subject: Announcing PHP 5.5 security-only
From: jpauli@php.net (Julien Pauli)

--001a11c261a461a59805191a283f
Content-Type: text/plain; charset=UTF-8

Hi internals.


As you may know/remember , PHP 5.5 has been released two years ago.
We've released 26 versions so far (24 would be the "normal" computing, but
we always got some bad releases, mainly from human failure factor).

The actual stable 5.5 is PHP 5.5.26.
This week, I'm going to tag the last 5.5 RC : 5.5.27RC.
Then will follow the *last* "normal process" 5.5 release : 5.5.27.

***
The PHP 5.5 branch is going to enter in security only, and in the same
time, PHP 5.4 will finally die
***

As a contributor, you are still allowed to commit to the 5.5 branch until
the next RC, that is until tomorrow tuesday or wednesday 24th of June.

After this date, I ask every contributor to consider 5.5 as beeing in sec
only, and to commit their code to the 5.6 branch (and merge up) thus **to
not commit anything to the 5.5 branch anymore**. 5.6 will become the lowest
branch to commit in.
For security related commits, please talk to the RM (mainly myself) to know
what to do. Also remember about our security@ mailing list.

To prevent leaks, we are going to restrict the commit access to the 5.5
branch in few days, so that if you forget about it, you'll be denied by git
if trying to push to 5.5 => push to 5.6 instead ;-)
Only RM will keep their commit access to the 5.5 branch.

Our usual security process does not change however, after 5.5.27 is
released, 5.5 will have no more release until enough security bugs are
found. That may still happen every month, or not.

Thank you for your understanding, and happy PHP Hacking.


Julien Pauli

--001a11c261a461a59805191a283f--