Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 03 Mar 2015 09:37:01 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 198150] PHP 53 - 6 months EOL - this should not be in ports
Message-ID:  <bug-198150-13-qLN7wIeGIo@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-198150-13@https.bugs.freebsd.org/bugzilla/>
References:  <bug-198150-13@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198150

--- Comment #4 from John Marino <marino@FreeBSD.org> ---
(In reply to Harrison Grundy from comment #3)

In theory, this promise has vaguely been made although it is practically
impossible to continuously enforce.

The proposal also implicitly establishes RH as a security authority on PHP --
meaning the assumption is they are aware of *all* security holes in PHP 5.3 and
patch them all.

Frankly I don't trust RH to do this and even if I did, I don't trust all their
patches to get into PHP 5.3 here in a timely and acceptable fashion.  Where's
the proof that this is happening now?  We should be equivalent with PHP 53 in
RH/Centos right now if it were happening, right?  Are we?

The safe play is to purge this version.

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-198150-13-qLN7wIeGIo>