From: Gergely CZUCZY on
On Wed, 2 Dec 2009 13:13:54 +0100
Martin Wilke <miwi(a)FreeBSD.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed, Dec 02, 2009 at 01:55:51AM +0200, Dmitry Pryanishnikov wrote:
> >
> > Hello!
> >
> > > Update instructions (choose one of them):
> > >
> > > 1) remove all php ports and all ports that depends on php,
> > > then reinstall your the php applications
> > >
> > > 2) deinstall the removed ports,
> > > then upgrade recursively the lang/php5 port
> > >
> > >
> > > To apply the patch (to a fresh ports tree):
> > >
> > > cd /usr/ports && patch -p0 -E ~/php53.diff
> > >
> > >
> > > Note: Zend decided to not support FreeBSD anymore, so a new
> > > ZendOptimizer release for php 5.3 will never be released.
> >
> > Hmm... Wouldn't then be better to keep PHP 5.2 available in
> > ports (e.g. lang/php52)? Not only for the sake of FreeBSD-based
> > WEB-servers with ZendOptimizer port installed - I suspect there
> > could be other reasons to stay with PHP 5.2 while it's still
> > available...
> >
>
> - From the Security site you should not hold 5.2X
Oh come on. Security-wise you shouldn't hold php at all. It's about
backwards incompatibility, not about security.

>
> - - Martin
> >
> > Sincerely, Dmitry
> > --
> > nic-hdl: LYNX-RIPE
> > _______________________________________________
> > freebsd-ports(a)freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> > To unsubscribe, send any mail to
> > "freebsd-ports-unsubscribe(a)freebsd.org"
> >
>
> - --
>
> +-----------------------+-------------------------------+
> | PGP : 0xB1E6FCE9 | Jabber : miwi(at)BSDCrew.de |
> | Skype : splash_111 | Mail : miwi(at)FreeBSD.org |
> +-----------------------+-------------------------------+
> | Mess with the Best, Die like the Rest! |
> +-----------------------+-------------------------------+
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.12 (FreeBSD)
>
> iEYEARECAAYFAksWWgEACgkQdLJIhLHm/OkUNACeOuvNIikaI/r19St7s/dyQ7Sn
> Kx8An3ZOS7BueqSMHYfxxyERE+rzoZgz
> =vZdB
> -----END PGP SIGNATURE-----
> _______________________________________________
> freebsd-ports(a)freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to
> "freebsd-ports-unsubscribe(a)freebsd.org"



--
Sincerely,
Gergely CZUCZY
Harmless Digital Bt

+36-30-9702963
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Alex Dupre on
Gergely CZUCZY ha scritto:
>> Oh come on. Security-wise you shouldn't hold php at all. It's about
>> backwards incompatibility, not about security.

PHP 5.3 is not more incompatible with 5.2 than 5.2 was with 5.1 (and 5.1
with 5.0). 5.2 branch will be dropped in near future, so I'm not going
to maintain 80 (eighty) additional ports just for fun. I can delay a
little more (a few weeks), but eventually it'll happen.
My original message has to be intended as a call for tester.

--
Alex Dupre
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Martin Wilke on
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Dec 02, 2009 at 02:19:02PM +0100, Gergely CZUCZY wrote:
> On Wed, 2 Dec 2009 13:13:54 +0100
> Martin Wilke <miwi(a)FreeBSD.org> wrote:
>
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > On Wed, Dec 02, 2009 at 01:55:51AM +0200, Dmitry Pryanishnikov wrote:
> > >
> > > Hello!
> > >
> > > > Update instructions (choose one of them):
> > > >
> > > > 1) remove all php ports and all ports that depends on php,
> > > > then reinstall your the php applications
> > > >
> > > > 2) deinstall the removed ports,
> > > > then upgrade recursively the lang/php5 port
> > > >
> > > >
> > > > To apply the patch (to a fresh ports tree):
> > > >
> > > > cd /usr/ports && patch -p0 -E ~/php53.diff
> > > >
> > > >
> > > > Note: Zend decided to not support FreeBSD anymore, so a new
> > > > ZendOptimizer release for php 5.3 will never be released.
> > >
> > > Hmm... Wouldn't then be better to keep PHP 5.2 available in
> > > ports (e.g. lang/php52)? Not only for the sake of FreeBSD-based
> > > WEB-servers with ZendOptimizer port installed - I suspect there
> > > could be other reasons to stay with PHP 5.2 while it's still
> > > available...
> > >
> >
> > - From the Security site you should not hold 5.2X
> Oh come on. Security-wise you shouldn't hold php at all. It's about
> backwards incompatibility, not about security.


That's your risk. But Bernhard Froehlich told me already there is a 5.2.12RC3
avalibel :)

- - Martin

>
> >
> > - - Martin
> > >
> > > Sincerely, Dmitry
> > > --
> > > nic-hdl: LYNX-RIPE
> > > _______________________________________________
> > > freebsd-ports(a)freebsd.org mailing list
> > > http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> > > To unsubscribe, send any mail to
> > > "freebsd-ports-unsubscribe(a)freebsd.org"
> > >
> >
> > - --
> >
> > +-----------------------+-------------------------------+
> > | PGP : 0xB1E6FCE9 | Jabber : miwi(at)BSDCrew.de |
> > | Skype : splash_111 | Mail : miwi(at)FreeBSD.org |
> > +-----------------------+-------------------------------+
> > | Mess with the Best, Die like the Rest! |
> > +-----------------------+-------------------------------+
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v2.0.12 (FreeBSD)
> >
> > iEYEARECAAYFAksWWgEACgkQdLJIhLHm/OkUNACeOuvNIikaI/r19St7s/dyQ7Sn
> > Kx8An3ZOS7BueqSMHYfxxyERE+rzoZgz
> > =vZdB
> > -----END PGP SIGNATURE-----
> > _______________________________________________
> > freebsd-ports(a)freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> > To unsubscribe, send any mail to
> > "freebsd-ports-unsubscribe(a)freebsd.org"
>
>
>
> --
> Sincerely,
> Gergely CZUCZY
> Harmless Digital Bt
>
> +36-30-9702963
>

- --

+-----------------------+-------------------------------+
| PGP : 0xB1E6FCE9 | Jabber : miwi(at)BSDCrew.de |
| Skype : splash_111 | Mail : miwi(at)FreeBSD.org |
+-----------------------+-------------------------------+
| Mess with the Best, Die like the Rest! |
+-----------------------+-------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (FreeBSD)

iEYEARECAAYFAksWcXUACgkQdLJIhLHm/OktxQCeI3zbkZfxcwEsdKQWtlvkWrDB
EIoAoJaZUvM25TI0SCWGby7gTIBfYXyY
=qZjK
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Gergely CZUCZY on
On Wed, 02 Dec 2009 14:52:35 +0100
Alex Dupre <ale(a)FreeBSD.org> wrote:

> Gergely CZUCZY ha scritto:
> >> Oh come on. Security-wise you shouldn't hold php at all. It's about
> >> backwards incompatibility, not about security.
>
> PHP 5.3 is not more incompatible with 5.2 than 5.2 was with 5.1 (and
> 5.1 with 5.0). 5.2 branch will be dropped in near future, so I'm not
> going to maintain 80 (eighty) additional ports just for fun. I can
> delay a little more (a few weeks), but eventually it'll happen.
> My original message has to be intended as a call for tester.
>

Actually I've run into this at zabbix, the guys were talking about the
php5.3 unsupportedness. It turned out that there are such changes into
the OOP part of the language that make code for 5.2 errorenous with
5.3, and requires application developers to update their code.

Apart from this project, there are tons of people running code with
pre-5.3 and in the commercial sector it might take a long way to update
all the codes to php5.3. Such a forced update (by removing the 5.2
code) can be especially dangerous in mission-critical applications
(let's not talk about people using php for this propose), and I think
there are actually quite a lot of people running php under freebsd.

So a way would be more than prefered in my opinion to keep php52 in
ports for a while, along with 5.3 to give time for these people to
update and test their code with 5.3. A forced update is not nice and
has lots of risk. People are using freebsd for its stability and stable
way of development, ports, whatever, and by forcing everyone to upgrade
to 5.3 would losing such a point of the whole OS.

--
Sincerely,
Gergely CZUCZY
Harmless Digital Bt

+36-30-9702963
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Miroslav Lachman on
Martin Wilke wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed, Dec 02, 2009 at 02:19:02PM +0100, Gergely CZUCZY wrote:
>> On Wed, 2 Dec 2009 13:13:54 +0100
>> Martin Wilke<miwi(a)FreeBSD.org> wrote:
>>
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA1
>>>
>>> On Wed, Dec 02, 2009 at 01:55:51AM +0200, Dmitry Pryanishnikov wrote:

[...]

>>>> Hmm... Wouldn't then be better to keep PHP 5.2 available in
>>>> ports (e.g. lang/php52)? Not only for the sake of FreeBSD-based
>>>> WEB-servers with ZendOptimizer port installed - I suspect there
>>>> could be other reasons to stay with PHP 5.2 while it's still
>>>> available...
>>>>
>>>
>>> - From the Security site you should not hold 5.2X
>> Oh come on. Security-wise you shouldn't hold php at all. It's about
>> backwards incompatibility, not about security.
>
>
> That's your risk. But Bernhard Froehlich told me already there is a 5.2.12RC3
> avalibel :)

5.2.12RC3 is available on QA site http://qa.php.net/ so 5.2.x is not
discontinued.

Miroslav Lachman
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"