Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:97907
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain belski.net from 85.214.73.107 cause and error)
Sender: "Anatol Belski" <anatol.php@belski.net>
To: "'Yasuo Ohgaki'" <yohgaki@ohgaki.net>
Cc: "'Niklas Keller'" <me@kelunik.com>,
	"'PHP Internals'" <internals@lists.php.net>
References: <094501d27255$19b2caa0$4d185fe0$@php.net> <CANUQDCgA6si5ni8j0fpeM6cizyGM=X1ZVu5c=tmukdfHR8QqyQ@mail.gmail.com> <01da01d27385$e89aa820$b9cff860$@php.net> <CAGa2bXayAg8eAELvmCcu2RpcPjdfDXAvmWbj2WDq2uanc-wP5Q@mail.gmail.com>
In-Reply-To: <CAGa2bXayAg8eAELvmCcu2RpcPjdfDXAvmWbj2WDq2uanc-wP5Q@mail.gmail.com>
Date: Sat, 21 Jan 2017 03:20:11 +0100
Message-ID: <01f101d2738c$e807b2c0$b8171840$@php.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Thread-Index: AQEZ+OSFEljtmQxLczrkfmNcvWsCOAFCc6XuAnRgyd0CFpYjmaKEufTg
Content-Language: en-us
Subject: RE: [PHP-DEV] PHP 7.0.15 available
From: ab@php.net ("Anatol Belski")

Hi Yasuo,

> -----Original Message-----
> From: Yasuo Ohgaki [mailto:yohgaki@ohgaki.net]
> Sent: Saturday, January 21, 2017 2:49 AM
> To: Anatol Belski <ab@php.net>
> Cc: Niklas Keller <me@kelunik.com>; PHP Internals =
<internals@lists.php.net>
> Subject: Re: [PHP-DEV] PHP 7.0.15 available
>=20
> Hi,
>=20
> On Sat, Jan 21, 2017 at 10:30 AM, Anatol Belski <ab@php.net> wrote:
>=20
> > > Could we change our current system and highlight security issues
> > > either
> > by color,
> > > an icon or even better, by grouping them separately for each =
release?
> > >
> > That could be an idea, yes. Currently we have a script to
> > automatically convert the NEWS entries to the HTML chunks. Probably
> > both the format of the NEWS items and some adaptation for the
> > conversion tool and site styles/code would be needed, to make this =
happen.
>=20
>=20
> Just a reminder.
> Please confirm this classification when this is implemented
> https://wiki.php.net/security [1]
>=20
> Thanks,
>=20
> [1] https://wiki.php.net/rfc/security-classification
>=20
Yeah, it's voted and is applied now. The document is also linked from =
bugs.php.net, so is also promoted. The exact severity could of course be =
included in NEWS, etc. as well. Only the implementation of the missing =
parts into the process is not in place. Other RMs would probably good to =
express the opinions, too. But also, it would be nice if someone could =
contribute implementations mentioned above. On my side it's out of =
question ATM, for time reasons.

Regards

Anatol