[Bug 227464] Re: Please Backport PHP 5.2.6 -- fixes important security bugs

[Dustin Kirkland]

On Wed, Jun 4, 2008 at 3:58 PM, Tormod Volden <bugpost.tormod at gmail.com> wrote:
> Mathias, shouldn't all security fixes go as SRU in hardy-security (or
> hardy-updates) and not in backports? Backports are for new features.

A complete merge of 5.2.6 would constitute a backport, as the version
has been bumped and new features have been added in addition to
security fixes.

Regarding SRU, see this comment:
https://bugs.edge.launchpad.net/ubuntu/+source/php5/+bug/227464/comments/8

I painstakingly collected url's to each of the PHP commit messages of
every security fix committed to PHP 5.2.6.  We're going to work on
applying each of those patches to PHP and proposing an SRU.  It's just
taking some time to get around to it ;-)  If someone else can prepare
a debdiff and attach to this bug, I'll be happy to review it.


:-Dustin

-- 
Please Backport PHP 5.2.6 -- fixes important security bugs
https://bugs.launchpad.net/bugs/227464
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.