# How critical does a bug need to be to warrant a new PHP release (like 5.1.5)? - Thread: https://externals.io/message/23679 - Original archive: https://news-web.php.net/php.internals/23679 - Started by steve on 2006-05-26T02:28:35+00:00 - Messages: 6 - Reply by email to internals@lists.php.net - More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt --- ## #23679 — steve — 2006-05-26T02:28:35+00:00 URL: https://externals.io/message/23679#23679 How critical does a bug need to be to warrant a new PHP release (like 5.1.5)? Are there specific criteria already laid out? --- ## #23680 — Pierre — 2006-05-26T02:37:12+00:00 URL: https://externals.io/message/23679#23680 · In reply to: #23679 > How critical does a bug need to be to warrant a new PHP release (like > 5.1.5)? Are there specific criteria already laid out? Security issues or critical bugs (for example segfaults or huge leaks not managed by the memory manager). Ilia will certainly complete this list :-) --Pierre --- ## #23681 — steve — 2006-05-26T02:54:45+00:00 URL: https://externals.io/message/23679#23681 · In reply to: #23680 What if it requires a PHP script flaw also (like calling a method from an object that doesn't exist)? I can shut down many a site that have 5.1.4 if I can find some input to expose a script flaw like that, if their setup is similar to mine (which I think is common). Damn search engine came across such a bug of mine on a test site and shut it down. Killed a couple others it wasn't searching because of it also. Accidental DOS! Oh the joy... :( Oh well, 5.1.2 works fine for now. > > > […] > > Security issues or critical bugs (for example segfaults or huge leaks > not managed by the memory manager). Ilia will certainly complete this > list :-) > > --Pierre --- ## #23682 — Jasper Bryant-Greene — 2006-05-26T03:05:39+00:00 URL: https://externals.io/message/23679#23682 · In reply to: #23681 -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Would you care to elaborate? Maybe a sample script that exhibits this behaviour? Jasper steve wrote: > What if it requires a PHP script flaw also (like calling a method from > an object that doesn't exist)? I can shut down many a site that have > 5.1.4 if I can find some input to expose a script flaw like that, if > their setup is similar to mine (which I think is common). Damn search > engine came across such a bug of mine on a test site and shut it down. > Killed a couple others it wasn't searching because of it also. > Accidental DOS! Oh the joy... > > :( > > Oh well, 5.1.2 works fine for now. > > > > […] > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEdnCDFfAeHhDzT4gRA4iqAKCQFanzjvSiF2+k+ChCc9Dj6m9N5ACgkLDS ICdJtzKh99zrdnR/PYwgK+A= =ocva -----END PGP SIGNATURE --- ## #23684 — Sara Golemon — 2006-05-26T04:02:10+00:00 URL: https://externals.io/message/23679#23684 · In reply to: #23682 > > […] > Would you care to elaborate? Maybe a sample script that exhibits this > behaviour? > Actually, please don't. If it's as serious as you make it out to be, we'll want to produce a fix and roll a release before the details get to any black hats. Please send your summary to group@php.net -Sara --- ## #23686 — Steph Fox — 2006-05-26T05:05:15+00:00 URL: https://externals.io/message/23679#23686 · In reply to: #23684 - or security@php.net - or both :) ----- Original Message ----- From: "Sara Golemon" To: "steve" Cc: "Jasper Bryant-Greene" ; Sent: Friday, May 26, 2006 6:02 AM Subject: Re: [PHP-DEV] How critical does a bug need to be to warrant a newPHP release (like 5.1.5)? > > […] > Actually, please don't. If it's as serious as you make it out to be, > we'll want to produce a fix and roll a release before the details get to > any black hats. > > Please send your summary to group@php.net > > -Sara > -- > > > > > __________ NOD32 1.1380 (20060125) Information __________ > > This message was checked by NOD32 antivirus system. > http://www.eset.com