Re: AW: Vulnerable PHP version according to nessus

2012-01-01 Thread Mike Mestnik
On 12/28/11 05:51, Jordon Bedwell wrote: > On Wed, Dec 28, 2011 at 2:54 AM, Adam D. Barratt > wrote: >> On 28.12.2011 07:56, Patrick Geschke wrote: >>> Hey, >>> >>> @Maintainers: Whats the overall Status of the package? >>> >>> According to php.net 5.3.8 is stable. >> >> 5.3.8 is in both testing a

Re: AW: Vulnerable PHP version according to nessus

2011-12-28 Thread Florian Weimer
* Jordon Bedwell: > New upstream version is used pretty loosely here. I would hardly > consider a bug fix release a new version. You guys treat versions as > if they're a matter of national security, because 5.3.7 vs 5.3.8 is > obviously gonna have some major major API changes and some way new >

Re: AW: Vulnerable PHP version according to nessus

2011-12-28 Thread Jordon Bedwell
On Wed, Dec 28, 2011 at 2:54 AM, Adam D. Barratt wrote: > On 28.12.2011 07:56, Patrick Geschke wrote: >> >> Hey, >> >> @Maintainers: Whats the overall Status of the package? >> >> According to php.net 5.3.8 is stable. > > > 5.3.8 is in both testing and unstable - see > http://packages.qa.debian.or

Re: AW: Vulnerable PHP version according to nessus

2011-12-28 Thread Adam D. Barratt
On 28.12.2011 07:56, Patrick Geschke wrote: Hey, @Maintainers: Whats the overall Status of the package? According to php.net 5.3.8 is stable. 5.3.8 is in both testing and unstable - see http://packages.qa.debian.org/p/php5.html Debian stable doesn't generally get new upstream versions of p