Re: [CentOS] CentOS 5 Testing repo

2012-03-18 Thread John R. Dennison
On Fri, Mar 16, 2012 at 01:22:45PM +1300, Spiro Harvey wrote:
 
 Looks like we'll have to upgrade the lot and hope for the best. This
 time, I'll put any testing packages we use in our own repos. Once
 bitten, twice paranoid. :)

Or don't use testing packages on production boxes in the first place.

It's far too easy to let such packages get stale and out of date and
subject yourself to security vulnerabilities.

IUS has had a maintained php-5.2 out for a long time now, there is
really no reason or excuse to have been using the years out of date 
junk that was in c5-testing.




John
-- 
@Evilpig when you let one idiot correct another idiot you just get two
@Evilpig clueless morons in a circle jerk.
@Dagmar  Fire gets the stains out real good.


pgpgVgTaLZWYJ.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 Testing repo

2012-03-15 Thread Peter Peltonen
Hi,

On Thu, Mar 15, 2012 at 12:17 AM, Tilman Schmidt
t.schm...@phoenixsoftware.de wrote:
 Unfortunately it seems that PHP code written for 5.2 won't necessarily
 run on either 5.1 or 5.3. I'm not a PHP expert myself but my PHP-savvy
 colleagues and customers unanimously tell me so. So what's a poor web
 server admin to do? I am doomed to keep around one webserver with PHP
 5.1, one with PHP 5.2 and one with PHP 5.3, only hoping one of them will
 have been deserted by the time PHP 5.4 is released.

The Rackspace IUS repo provides PHP 5.2 packages. See docs how to use it:

http://iuscommunity.org/Docs/ClientUsageGuide#Upgrading_Stock_RHEL_Packages_to_IUS_Packages

I am running their php 5.2 on one of my centos5 servers without no
probs. I upgraded from the php in the testing repo.

Best,
Peter
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 Testing repo

2012-03-15 Thread Spiro Harvey
 Those php-5.2.x rpms were unmaintained and full of security issues, so
 they were removed.
 You likely do not want any of the RPMs that were there, though I do
 have some of them on our build server.
 I would HIGHLY recommend that you either use the 5.1.6 security
 patched c5 main tree php ... OR ... use the php53 from c5.
 If you absolutely HAVE to have 5.2.x, I would recommend these:

Thanks. Yeah, the problem we've got is that we need to build some test
recovery boxes exactly the same as the live servers, so sourcing new
packages from external repos won't cut it unfortunately. 

Looks like we'll have to upgrade the lot and hope for the best. This
time, I'll put any testing packages we use in our own repos. Once
bitten, twice paranoid. :)

Cheers


-- 
Spiro Harvey   Knossos Networks Ltd
(04) 460-2531 : (021) 295-1923  www.knossos.net.nz


signature.asc
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 Testing repo

2012-03-14 Thread Tilman Schmidt
Am 14.03.2012 02:46, schrieb Johnny Hughes:
 
 If you absolutely HAVE to have 5.2.x, I would recommend these:
 
 http://rpms.famillecollet.com/
 
 (he has a 5.2.17 version, the latest 5.2.x version)
 
 I am pretty sure that they (php.net) are not releasing security updates
 for the 5.2.x series any more. 
 
 Therefore, your best bet is to use either the 5.1.6 version from c5 (Red
 Hat backports security updates to this, so from a security standpoint it
 is better than 5.2.17) ... OR ... use the php53 from c5.

Unfortunately it seems that PHP code written for 5.2 won't necessarily
run on either 5.1 or 5.3. I'm not a PHP expert myself but my PHP-savvy
colleagues and customers unanimously tell me so. So what's a poor web
server admin to do? I am doomed to keep around one webserver with PHP
5.1, one with PHP 5.2 and one with PHP 5.3, only hoping one of them will
have been deserted by the time PHP 5.4 is released.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 Testing repo

2012-03-13 Thread Johnny Hughes
On 03/13/2012 07:58 PM, Spiro Harvey wrote:
 We were using the CentOS 5 testing repo on dev.centos.org to update our
 webservers' PHP to 5.2. However, we've just tried building a new
 machine lately and found that the repo seems to be empty. Is this a
 temporary fault, or has it gone away now that CentOS 6 is out?

 If it has gone away, where can I grab PHP 5.2 packages from?


Those php-5.2.x rpms were unmaintained and full of security issues, so
they were removed.

You likely do not want any of the RPMs that were there, though I do have
some of them on our build server.

I would HIGHLY recommend that you either use the 5.1.6 security patched
c5 main tree php ... OR ... use the php53 from c5.

If you absolutely HAVE to have 5.2.x, I would recommend these:

http://rpms.famillecollet.com/

(he has a 5.2.17 version, the latest 5.2.x version)

I am pretty sure that they (php.net) are not releasing security updates
for the 5.2.x series any more. 

Therefore, your best bet is to use either the 5.1.6 version from c5 (Red
Hat backports security updates to this, so from a security standpoint it
is better than 5.2.17) ... OR ... use the php53 from c5.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos