Re: [SECURITY] [DSA 3358-1] php5 security update

From	Moritz Mühlenhoff <jmm@inutil.org>
Newsgroups	linux.debian.security
Subject	Re: [SECURITY] [DSA 3358-1] php5 security update
Date	2015-09-15 23:10 +0200
Message-ID	<q95Ed-vd-9@gated-at.bofh.it> (permalink)
References	<q8gV6-2l2-49@gated-at.bofh.it> <q8DRE-1Is-39@gated-at.bofh.it> <q92Gm-3AZ-11@gated-at.bofh.it> <q939o-4nZ-13@gated-at.bofh.it>
Organization	Cocytus

Show all headers | View raw

Wolfgang Karall <lists+debian-security@karall-edv.at> schrieb:
>
> --rQ2U398070+RC21q
> Content-Type: text/plain; charset=iso-8859-1
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> Hello Moritz,
>
> On 15-09-15 13:58:52, Moritz M=FChlenhoff wrote:
>> The upstream security support time frame isn't identical to the support
>> time frame in Debian, e.g. PHP 5.3 from squeeze also continues to
>> be security-supported.
>
> I was under the impression that PHP security support at some point
> switched to following the upstream versions, but I'm happy to see
> backported security fixes for Debian 5.4 in wheezy.

Correct, as long as PHP ships their point releases, we're now
releasing these through security.debian.org, but once that ends
we can still backport fixes on our own.

So, wheezy will stick with 5.4.

Cheers,
        Moritz

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3358-1] php5 security update Wolfgang Karall-Ahlborn <lists+debian-security@karall-edv.at> - 2015-09-14 17:30 +0200
  Re: [SECURITY] [DSA 3358-1] php5 security update Moritz Mühlenhoff <jmm@inutil.org> - 2015-09-15 20:00 +0200
    Re: [SECURITY] [DSA 3358-1] php5 security update Wolfgang Karall <lists+debian-security@karall-edv.at> - 2015-09-15 20:30 +0200
      Re: [SECURITY] [DSA 3358-1] php5 security update Moritz Mühlenhoff <jmm@inutil.org> - 2015-09-15 23:10 +0200

csiph-web