# 5.6.0 final is near - Thread: https://externals.io/message/76601 - Original archive: https://news-web.php.net/php.internals/76601 - Started by Ferenc Kovacs on 2014-08-17T09:25:31+00:00 - Messages: 9 - Reply by email to internals@lists.php.net - More for agents: search with https://externals.io/search.md?q={query} · RFCs at https://externals.io/rfc.md · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt --- ## #76601 — Ferenc Kovacs — 2014-08-17T09:25:31+00:00 URL: https://externals.io/message/76601#76601 Hi, I'm planning to release 5.6.0 from RC4 if nothing serious comes up, so this is just a heads-up: if you think that there is some fix, which should make into the 5.6.0 final (which isn't in RC4) or if you think that there is some blocker issue which should be solved before the 5.6.0 final release, please drop me an email just to be sure. Thanks! -- Ferenc Kovács @Tyr43l - http://tyrael.hu --- ## #76657 — Ferenc Kovacs — 2014-08-18T14:46:53+00:00 URL: https://externals.io/message/76601#76657 · In reply to: #76601 > Hi, > > I'm planning to release 5.6.0 from RC4 if nothing serious comes up, so > this is just a heads-up: if you think that there is some fix, which should > make into the 5.6.0 final (which isn't in RC4) or if you think that there > is some blocker issue which should be solved before the 5.6.0 final > release, please drop me an email just to be sure. > > Thanks! > > -- > Ferenc Kovács > @Tyr43l - http://tyrael.hu > Hi, just to clarify: if no blocker issue is reported from php-5.6.0RC4, then we won't have another RC, but php-5.6.0 (final) will be tagged using PHP-5.6.0RC4 as it base, and maybe some commits cherry-picked (security fixes for example, or changes with low impact like NEWS/UPGRADING/test fixes) on top of it. so commits in the PHP-5.6 branch after the RC4 tagging won't be in the final by default, only if you can convince me that we need that. -- Ferenc Kovács @Tyr43l - http://tyrael.hu --- ## #76709 — Lior Kaplan — 2014-08-19T22:36:07+00:00 URL: https://externals.io/message/76601#76709 · In reply to: #76657 Please make sure these security fixes are included: fileinfo: Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587) gd: Fixed bug #67730 (Null byte injection possible with imagexxx functions). (CVE-2014-5120) Thanks, Kaplan > > > > […] > should > > […] > > Hi, > > just to clarify: > if no blocker issue is reported from php-5.6.0RC4, then we won't have > another RC, but php-5.6.0 (final) will be tagged using PHP-5.6.0RC4 as it > base, and maybe some commits cherry-picked (security fixes for example, or > changes with low impact like NEWS/UPGRADING/test fixes) on top of it. > so commits in the PHP-5.6 branch after the RC4 tagging won't be in the > final by default, only if you can convince me that we need that. > > -- > Ferenc Kovács > @Tyr43l - http://tyrael.hu --- ## #76824 — Ferenc Kovacs — 2014-08-22T23:58:16+00:00 URL: https://externals.io/message/76601#76824 · In reply to: #76601 > Hi, > > I'm planning to release 5.6.0 from RC4 if nothing serious comes up, so > this is just a heads-up: if you think that there is some fix, which should > make into the 5.6.0 final (which isn't in RC4) or if you think that there > is some blocker issue which should be solved before the 5.6.0 final > release, please drop me an email just to be sure. > > Thanks! > > -- > Ferenc Kovács > @Tyr43l - http://tyrael.hu > Hi, it seems that we have a blocker: https://bugs.php.net/bug.php?id=67694 ps: thanks to Florian for pinging me about it, I missed this one :( -- Ferenc Kovács @Tyr43l - http://tyrael.hu --- ## #76865 — Ferenc Kovacs — 2014-08-25T11:22:03+00:00 URL: https://externals.io/message/76601#76865 · In reply to: #76824 > > > > > > > […] > > Hi, > > it seems that we have a blocker: > https://bugs.php.net/bug.php?id=67694 > > ps: thanks to Florian for pinging me about it, I missed this one :( > > > -- > Ferenc Kovács > @Tyr43l - http://tyrael.hu > Kudos for Tjerk for the quick fix, which seems a rather small one-liner fix, so I'm not sure to release another RC based on RC4 plus the security fixes, the proper fix for https://bugs.php.net/bug.php?id=67865 and with the fix for https://bugs.php.net/bug.php?id=67694, or to release the final version based on RC4 + reverting http://git.php.net/?p=php-src.git;a=commit;h=e4ff7f2ee346d641715694209e61704c9e815483 (which introduced https://bugs.php.net/bug.php?id=67865) and with the fix for https://bugs.php.net/bug.php?id=67694. Julien what do you think? -- Ferenc Kovács @Tyr43l - http://tyrael.hu --- ## #76866 — Remi Collet — 2014-08-25T12:38:21+00:00 URL: https://externals.io/message/76601#76866 · In reply to: #76601 Le 17/08/2014 11:25, Ferenc Kovacs a écrit : > Hi, > > I'm planning to release 5.6.0 from RC4 if nothing serious comes up, > so this is just a heads-up: if you think that there is some fix, > which should make into the 5.6.0 final (which isn't in RC4) or if > you think that there is some blocker issue which should be solved > before the 5.6.0 final release, please drop me an email just to be > sure. Any plan to drop the -dev from some extensions version ? Zend 2.6.0-dev OPcache v7.0.4-dev, mysqlnd 5.0.11-dev sqlite3 0.7-dev Remi. --- ## #76867 — Ferenc Kovacs — 2014-08-25T12:45:07+00:00 URL: https://externals.io/message/76601#76867 · In reply to: #76866 > Le 17/08/2014 11:25, Ferenc Kovacs a écrit : > > […] > > Any plan to drop the -dev from some extensions version ? > > Zend 2.6.0-dev > OPcache v7.0.4-dev, > mysqlnd 5.0.11-dev > sqlite3 0.7-dev > > > > Remi. > > > -- > > > > Hi Remi, I've planned to do it for Zend, but didn't think about the others. I see no harm in removing those, so if nobody objects I think it would be fine. -- Ferenc Kovács @Tyr43l - http://tyrael.hu --- ## #76868 — Julien Pauli — 2014-08-25T16:08:44+00:00 URL: https://externals.io/message/76601#76868 · In reply to: #76865 > > > > > > […] > > > Kudos for Tjerk for the quick fix, which seems a rather small one-liner fix, > so I'm not sure to release another RC based on RC4 plus the security fixes, > the proper fix for https://bugs.php.net/bug.php?id=67865 and with the fix > for https://bugs.php.net/bug.php?id=67694, or to release the final version > based on RC4 + reverting > http://git.php.net/?p=php-src.git;a=commit;h=e4ff7f2ee346d641715694209e61704c9e815483 > (which introduced https://bugs.php.net/bug.php?id=67865) and with the fix > for https://bugs.php.net/bug.php?id=67694. > Julien what do you think? I'm more in favour of releasing a GA. So, RC4 + sec fixes (that's OK) + revert of e4ff7f2ee346d641715694209e61704c9e815483 (done in last 5.4 and 5.5 releases) + fix for #67694. That's the safest path to have a GA soon (we are late) and on a stable code basis. Then we'll start our classical support plan, and have a 5.6.1RC1 in two weeks. Julien.Pauli --- ## #76903 — Ferenc Kovacs — 2014-08-27T08:50:02+00:00 URL: https://externals.io/message/76601#76903 · In reply to: #76867 > > > > On Mon, Aug 25, 2014 at 2:38 PM, Remi Collet > wrote: > > > […] > Hi Remi, > > I've planned to do it for Zend, but didn't think about the others. > I see no harm in removing those, so if nobody objects I think it would be > fine. > > in the end, I only removed the -dev suffix from the Zend version, because all of the others have the same version number in 5.4 and 5.5, so was a bit afraid that changing it would introduce last-minute problems. -- Ferenc Kovács @Tyr43l - http://tyrael.hu