Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #14305

Re: timezone

Show key headers only | View raw

Stefan Froehlich wrote:

> On Fri, 10 Oct 2014 16:08:13 Thomas 'PointedEars' Lahn wrote:
>> > The current version for Ubuntu 14.04 LTS is PHP 5.5.9 (aka PHP 5.5), 
>> Your “aka” is wrong, too.  The current PHP 5.5 release is PHP 5.5.17.
> 
> You don't know too much about Ubuntus (or Debians) way of version
> numbering, do you?

I do.  I have been running Debian GNU/Linux (Sid) on clients and servers 
since 11 years, and I have worked with servers running Ubuntu Linux.
 
>> > not PHP 5.5.17.
> 
>> [...] That is why *now* (*October* 2014) the update *to* PHP 5.5.17, of
>> September, or at least 5.5.16, of August, is recommended.
> 
> This is recommended by whom?

The PHP Group.  Debian.  Ubuntu, in a way.

> Where?

php.net, debian.org, launchpad.net (at least).

> And how should this update (in your opinion) be done?

Depends on the OS and distribution.

Ubuntu has incorporated two security fixes of 5.5.16 (for CVE-2014-3587) in 
their 5.5.9+dfsg-1ubuntu4.4 and 5.5.12+dfsg-2ubuntu4, so you can just run 
“apt-get update; apt-get upgrade” after you have enabled security updates.  
AISB.  However, you should be aware that this will still not give you *all* 
security fixes of 5.5.16.
 
>> And this should be possible *using the Debian/Ubuntu package manager,
>> apt-get*, so your rant about using the package manager is completely
>> missing the point.
> 
> No, this is neither possible nor should it be possible.

Nonsense.

> You can get security updates for both distributions, and you will end up
> with something that has a) no currently known weaknesses and b) is still
> carrying the same version number (in this case 5.5.9).

It is carrying a *different* version number for Ubuntu (Trusty Tahr), but 
that is starting with “5.5.9”; I give you that.  Utopic Unicorn has, or will 
have, as it appears now, only PHP 5.5.12 with two security fixes of 5.5.16.

<https://launchpad.net/ubuntu/+source/php5/5.5.12+dfsg-2ubuntu4>

By contrast, Debian has moved on already:

# aptitude versions php5-common 
Package php5-common:                           
p   5.3.3-7+squeeze19                         oldstable              500 
p   5.4.4-14+deb7u11                          stable                 500 
p   5.4.4-14+deb7u14                          stable                 500 
i   5.6.0+dfsg-1                                                     100 
p   5.6.0+dfsg-1+b1                           testing,unstable       990 

Package php5-common:amd64:
p   5.3.3-7+squeeze19                         oldstable              500 
p   5.4.4-14+deb7u11                          stable                 500 
p   5.4.4-14+deb7u14                          stable                 500 
p   5.6.0+dfsg-1+b1                           testing,unstable       990 

>> But there were security leaks fixed, so it does make a difference
>> which PHP (5.5) version you are running.
> 
> php5 (5.5.9+dfsg-1ubuntu4.4) would be quit fine, as far as I can
> see. The 4.4 is the interesting part here, not the 5.5.9.

I know.

-- 
PointedEars
Zend Certified PHP Engineer
Twitter: @PointedEars2
Please do not Cc: me. / Bitte keine Kopien per E-Mail.

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

timezone bill <william@TechServSys.com> - 2014-10-09 15:22 -0400
  Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-09 21:58 +0200
    Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-09 16:23 -0400
      Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-09 22:47 +0200
        Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-09 20:54 -0400
          Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-10 16:08 +0200
            Re: timezone Stefan+Usenet@Froehlich.Priv.at (Stefan Froehlich) - 2014-10-10 14:19 +0000
              Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-10 10:47 -0400
              Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-10 16:58 +0200
                Re: timezone Tim Streater <timstreater@greenbee.net> - 2014-10-10 21:59 +0100
                Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-11 13:40 +0200
                Re: timezone Stefan+Usenet@Froehlich.Priv.at (Stefan Froehlich) - 2014-10-11 09:02 +0000
                Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-11 13:37 +0200
                Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-11 10:25 -0400
            Re: timezone bill <william@TechServSys.com> - 2014-10-10 13:49 -0400
    Re: timezone bill <william@TechServSys.com> - 2014-10-10 07:45 -0400
    Re: timezone bill <william@TechServSys.com> - 2014-10-10 07:56 -0400
      Re: timezone Matthew Carter <m@ahungry.com> - 2014-10-10 09:55 -0400
        Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-10 10:52 -0400
      Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-10 16:17 +0200
  Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-09 16:20 -0400
    Re: timezone Matthew Carter <m@ahungry.com> - 2014-10-09 17:16 -0400
      Re: timezone Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-10-09 23:38 +0200
      Re: timezone Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-09 20:56 -0400
  Re: timezone Tim Streater <timstreater@greenbee.net> - 2014-10-09 21:52 +0100

csiph-web