Re: When PHP5 port will be updated?

2007-09-13 Thread Alex Dupre

I will update the port tomorrow.
Yes, testing things requires time.
Yes, I'm working on a few PRs.
Yes, I was waiting for suhosin since it's on by default.
Yes (even if nobody said it), using php 5.2.4 without suhosin is more 
dangerous than php 5.2.3 with suhosin.


--
Alex Dupre
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: When PHP5 port will be updated?

2007-09-13 Thread Martin Tournoij
On Thu 13 Sep 2007 20:09, LI Xin wrote:
> Ted Nicolson wrote:
> > Hi,
> > 
> > PHP 5.2.4 has been released three weeks ago, but still is not available for
> > FreeBSD (5.2.3 is the latest portversion)
> > 
> > http://www.freebsd.org/cgi/query-pr.cgi?pr=116182
> > 
> > According to the above pr, "PHP 5 versions before 5.2.4 have numerous
> > security vulnerabilities" that have been addressed with the latest version.
> >  I've heared that the cause of the delay is the lack of a compatible Suhosin
> > patch. Same happened months ago with a previous php5 release. If this is the
> > reason of delay, then please split the port in two new ones, with and
> > without Suhosin.
> > 
> >  Any idea when the updated php5 port will be released?
> 
> I think ale@ is working on it, plus some new proposed changes in our PR
> database.  Because php5 is a widely used port so he may want to test it
> for more time.
> 
> Cheers,
> -- 
> Xin LI <[EMAIL PROTECTED]>http://www.delphij.net/
> FreeBSD - The Power to Serve!

If you really want to update php to 5.2.4 you can use this patch:
http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/116188

Note that I wouldn't recommend using this patch, the security issues
in 5.2.3 are not very serious, and this patch doesn't include the
Suhosin patch.

Regards,
Martin Tournoij
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: When PHP5 port will be updated?

2007-09-13 Thread Bill Moran
In response to Robert Huff <[EMAIL PROTECTED]>:

> Ted Nicolson writes:
> 
> >   Any idea when the updated php5 port will be released?
> 
>   "When the maintainer has time to work on it and decided it's
> ready."

Alternately, you could submit a patch.

While you're welcome to post FreeBSD-related email of just about any
nature, you're posting is not (generally) conducive to getting things
done in the Open Source world.  The following improvements will likely
lead to better responses in the future.

* [EMAIL PROTECTED] is listed as the maintainer for this port.  By
  emailing ports@, you show that you haven't done any real research
  into the situation.  It would be appropriate to email ale@ first
  to check on the status, and only email ports@ if ale@ doesn't
  respond.
* You email comes across as rather demanding.  While that may not
  have been your intent, that's how it reads.  Demanding things of
  volunteers usually doesn't win you a lot of friends.  Consider
  using phrases like, "is there any way I can help speed up the
  process"  It's quite possible that ale@ is working on it, and
  having some testers would be helpful to him.

-- 
Bill Moran
http://www.potentialtech.com
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: When PHP5 port will be updated?

2007-09-13 Thread LI Xin
Ted Nicolson wrote:
> Hi,
> 
> PHP 5.2.4 has been released three weeks ago, but still is not available for
> FreeBSD (5.2.3 is the latest portversion)
> 
> http://www.freebsd.org/cgi/query-pr.cgi?pr=116182
> 
> According to the above pr, "PHP 5 versions before 5.2.4 have numerous
> security vulnerabilities" that have been addressed with the latest version.
>  I've heared that the cause of the delay is the lack of a compatible Suhosin
> patch. Same happened months ago with a previous php5 release. If this is the
> reason of delay, then please split the port in two new ones, with and
> without Suhosin.
> 
>  Any idea when the updated php5 port will be released?

I think ale@ is working on it, plus some new proposed changes in our PR
database.  Because php5 is a widely used port so he may want to test it
for more time.

Cheers,
-- 
Xin LI <[EMAIL PROTECTED]>  http://www.delphij.net/
FreeBSD - The Power to Serve!



signature.asc
Description: OpenPGP digital signature