Re: [SECURITY] [DSA 3358-1] php5 security update

Path	csiph.com!goblin1!goblin2!goblin.stu.neva.ru!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Moritz Mühlenhoff <jmm@inutil.org>
Newsgroups	linux.debian.security
Subject	Re: [SECURITY] [DSA 3358-1] php5 security update
Date	Tue, 15 Sep 2015 23:10:01 +0200
Message-ID	<q95Ed-vd-9@gated-at.bofh.it> (permalink)
References	<q8gV6-2l2-49@gated-at.bofh.it> <q8DRE-1Is-39@gated-at.bofh.it> <q92Gm-3AZ-11@gated-at.bofh.it> <q939o-4nZ-13@gated-at.bofh.it>
X-Original-To	debian-security@lists.debian.org
X-Mailbox-Line	From debian-security-request@lists.debian.org Tue Sep 15 21:08:40 2015
Old-Return-Path	<gldds-debian-security@m.gmane.org>
X-Amavis-Spam-Status	No, score=-7.698 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, HEADER_FROM_DIFFERENT_DOMAINS=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=0.001] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate:hard: -6.1
X-Injected-Via-Gmane	http://gmane.org/
Organization	Cocytus
Lines	26
X-Gmane-NNTP-Posting-Host	dyndsl-095-033-102-159.ewe-ip-backbone.de
User-Agent	slrn/1.0.2 (Linux)
X-Mailing-List	<debian-security@lists.debian.org> archive/latest/27389
List-ID	<debian-security.lists.debian.org>
List-URL	<https://lists.debian.org/debian-security/>
List-Archive	https://lists.debian.org/msgid-search/slrnmvgs4j.4kk.jmm@inutil.org
Approved	robomod@news.nic.it
Sender	robomod@news.nic.it
X-Original-Date	Tue, 15 Sep 2015 21:25:07 +0200
X-Original-Message-ID	<slrnmvgs4j.4kk.jmm@inutil.org>
X-Original-References	<E1Zb8jA-0007aP-FT@master.debian.org> <20150914151256.GE13984@lenny.fqdn.at> <slrnmvg1vs.t7a.jmm@inutil.org> <20150915182512.GC20123@lenny.fqdn.at>
X-Original-X-Complaints-To	usenet@ger.gmane.org
Xref	csiph.com linux.debian.security:4363

Show key headers only | View raw

Wolfgang Karall <lists+debian-security@karall-edv.at> schrieb:
>
> --rQ2U398070+RC21q
> Content-Type: text/plain; charset=iso-8859-1
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> Hello Moritz,
>
> On 15-09-15 13:58:52, Moritz M=FChlenhoff wrote:
>> The upstream security support time frame isn't identical to the support
>> time frame in Debian, e.g. PHP 5.3 from squeeze also continues to
>> be security-supported.
>
> I was under the impression that PHP security support at some point
> switched to following the upstream versions, but I'm happy to see
> backported security fixes for Debian 5.4 in wheezy.

Correct, as long as PHP ships their point releases, we're now
releasing these through security.debian.org, but once that ends
we can still backport fixes on our own.

So, wheezy will stick with 5.4.

Cheers,
        Moritz

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3358-1] php5 security update Wolfgang Karall-Ahlborn <lists+debian-security@karall-edv.at> - 2015-09-14 17:30 +0200
  Re: [SECURITY] [DSA 3358-1] php5 security update Moritz Mühlenhoff <jmm@inutil.org> - 2015-09-15 20:00 +0200
    Re: [SECURITY] [DSA 3358-1] php5 security update Wolfgang Karall <lists+debian-security@karall-edv.at> - 2015-09-15 20:30 +0200
      Re: [SECURITY] [DSA 3358-1] php5 security update Moritz Mühlenhoff <jmm@inutil.org> - 2015-09-15 23:10 +0200

csiph-web