Re: [PHP-DEV] 5.3.7pl1

2011-08-19 Thread Reindl Harald
Am 20.08.2011 01:16, schrieb Stas Malyshev: > Hi! > > Looks like 5.3.7 shipped with broken crypt() (see bug# 55439 and > http://svn.php.net/viewvc/?view=revision&revision=315218) - and I think > it's a serious problem since this means > everybody's md5 passwords will stop working - so should we

RE: [PHP-DEV] 5.3.7pl1

2011-08-19 Thread Uwe Schindler
+1 - Uwe Schindler theta...@php.net - http://www.php.net NSAPI SAPI developer Bremen, Germany > -Original Message- > From: Stas Malyshev [mailto:smalys...@sugarcrm.com] > Sent: Saturday, August 20, 2011 1:17 AM > To: PHP Internals > Subject: [PHP-DEV] 5.3.7pl1 > > Hi! > > Looks lik

Re: [PHP-DEV] 5.3.7pl1

2011-08-19 Thread Rasmus Lerdorf
On 08/19/2011 04:16 PM, Stas Malyshev wrote: > Hi! > > Looks like 5.3.7 shipped with broken crypt() (see bug# 55439 and > http://svn.php.net/viewvc/?view=revision&revision=315218) - and I > think it's a serious problem since this means everybody's md5 passwords > will stop working - so should we m

Re: [PHP-DEV] 5.3.7pl1

2011-08-19 Thread Nathaniel Catchpole
From my phone. Apologies for brevity and typos. On 2011/08/20, at 9:03, Rasmus Lerdorf wrote: >> >> > > The secondary problem is that we are not doing a good job running our > tests prior to releases. I think this is mostly because we have way > too > many tests that fail and one more or less

Re: [PHP-DEV] 5.3.7pl1

2011-08-20 Thread Derick Rethans
On Fri, 19 Aug 2011, Stas Malyshev wrote: > Looks like 5.3.7 shipped with broken crypt() (see bug# 55439 and > http://svn.php.net/viewvc/?view=revision&revision=315218) - and I > think it's a serious problem since this means everybody's md5 > passwords will stop working - so should we make 5.3.

Re: [PHP-DEV] 5.3.7pl1

2011-08-20 Thread Scott MacVicar
On 19 Aug 2011, at 16:16, Stas Malyshev wrote: > Hi! > > Looks like 5.3.7 shipped with broken crypt() (see bug# 55439 and > http://svn.php.net/viewvc/?view=revision&revision=315218) - and I think > it's a serious problem since this means everybody's md5 passwords will stop > working - so shou

Re: [PHP-DEV] 5.3.7pl1

2011-08-20 Thread Pierre Joye
On Sat, Aug 20, 2011 at 11:16 AM, Scott MacVicar wrote: > On 19 Aug 2011, at 16:16, Stas Malyshev wrote: > >> Hi! >> >> Looks like 5.3.7 shipped with broken crypt() (see bug# 55439 and >> http://svn.php.net/viewvc/?view=revision&revision=315218) - and I think >> it's a serious problem since thi

Re: [PHP-DEV] 5.3.7pl1

2011-08-20 Thread Sebastian Bergmann
Am 20.08.2011 01:16, schrieb Stas Malyshev: > will stop working - so should we make 5.3.7pl1? Not 5.3.7pl1 but rather 5.3.8, please. -- Sebastian BergmannCo-Founder and Principal Consultant http://sebastian-bergmann.de/ http://thePHP.cc/ -- PHP In

Re: [PHP-DEV] 5.3.7pl1

2011-08-20 Thread Adam Harvey
On Aug 20, 2011 7:19 PM, "Pierre Joye" wrote: > > On Sat, Aug 20, 2011 at 11:16 AM, Scott MacVicar wrote: > > 5.3.8 and lets not apply the coverity fixes during the final RC. > > Let not apply anything before the final RC. That's how it should be. Seconded. Depending on the timeframe for 5.3.8,

Re: [PHP-DEV] 5.3.7pl1

2011-08-21 Thread Pierre Joye
hi, On Sun, Aug 21, 2011 at 3:57 AM, Adam Harvey wrote: > Depending on the timeframe for 5.3.8, should we be pulling 5.3.7 from the > front page (or posting additional news) so users don't inadvertently end up > with crypt() issues? We should, anyone with web karma could add a note on www? 5.3

Re: [PHP-DEV] 5.3.7pl1

2011-08-22 Thread Ferenc Kovacs
On Sun, Aug 21, 2011 at 12:10 PM, Pierre Joye wrote: > hi, > > On Sun, Aug 21, 2011 at 3:57 AM, Adam Harvey wrote: > >> Depending on the timeframe for 5.3.8, should we be pulling 5.3.7 from the >> front page (or posting additional news) so users don't inadvertently end up >> with crypt() issues?

Re: [PHP-DEV] 5.3.7pl1

2011-08-22 Thread Hannes Magnusson
On Mon, Aug 22, 2011 at 09:42, Ferenc Kovacs wrote: > On Sun, Aug 21, 2011 at 12:10 PM, Pierre Joye wrote: >> hi, >> >> On Sun, Aug 21, 2011 at 3:57 AM, Adam Harvey wrote: >> >>> Depending on the timeframe for 5.3.8, should we be pulling 5.3.7 from the >>> front page (or posting additional news)

Re: [PHP-DEV] 5.3.7pl1

2011-08-22 Thread Hannes Magnusson
On Mon, Aug 22, 2011 at 10:07, Hannes Magnusson wrote: > On Mon, Aug 22, 2011 at 09:42, Ferenc Kovacs wrote: >> On Sun, Aug 21, 2011 at 12:10 PM, Pierre Joye wrote: >>> hi, >>> >>> On Sun, Aug 21, 2011 at 3:57 AM, Adam Harvey wrote: >>> Depending on the timeframe for 5.3.8, should we be pu

Re: [PHP-DEV] 5.3.7pl1

2011-08-22 Thread Ferenc Kovacs
On Mon, Aug 22, 2011 at 10:12 AM, Hannes Magnusson wrote: > On Mon, Aug 22, 2011 at 10:07, Hannes Magnusson > wrote: >> On Mon, Aug 22, 2011 at 09:42, Ferenc Kovacs wrote: >>> On Sun, Aug 21, 2011 at 12:10 PM, Pierre Joye wrote: hi, On Sun, Aug 21, 2011 at 3:57 AM, Adam Harvey w