On Mon, 2015-06-15 at 23:09 +0200, Jan Ehrhardt wrote: > Is that a real problem? I always use those sources for my own Windows > builds, because they are the first publicly available tarballs of a new > release.
They are made available by github, but no official php.net downloads. Until the release is announced the tag might be moved in case an error is detected. (sometimes for "trivial" stuff like CVEs in the NEWS file or merging a critical security fix) See also my reply to Christoph Becker in this thread a few minutes ago. johannes
signature.asc
Description: This is a digitally signed message part
