From owner-freebsd-ports@freebsd.org Sat Aug 10 18:19:00 2019 Return-Path: Delivered-To: freebsd-ports@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 5FF8AC2507 for ; Sat, 10 Aug 2019 18:19:00 +0000 (UTC) (envelope-from papowell@astart.com) Received: from smtp-out3.electric.net (smtp-out3.electric.net [208.70.128.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 465Vjv3Mvxz40xn for ; Sat, 10 Aug 2019 18:18:59 +0000 (UTC) (envelope-from papowell@astart.com) Received: from 1hwVx8-0002lw-U7 by out3d.electric.net with emc1-ok (Exim 4.92) (envelope-from ) id 1hwVxA-0002oN-UM for freebsd-ports@freebsd.org; Sat, 10 Aug 2019 11:18:56 -0700 Received: by emcmailer; Sat, 10 Aug 2019 11:18:56 -0700 Received: from [207.246.88.68] (helo=vultr.guest) by out3d.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92) (envelope-from ) id 1hwVx8-0002lw-U7 for freebsd-ports@freebsd.org; Sat, 10 Aug 2019 11:18:54 -0700 Received: from [127.0.0.1] (localhost [IPv6:0:0:0:0:0:0:0:1]) by vultr.guest (8.15.2/8.15.2) with ESMTP id x7AIIqUs035952 for ; Sat, 10 Aug 2019 11:18:53 -0700 (PDT) (envelope-from papowell@astart.com) Reply-To: papowell@astart.com Subject: Re: PHP version retirement To: freebsd-ports@freebsd.org References: From: Patrick Powell Organization: Astart Technologies Message-ID: <64faf143-bae3-378c-3ee2-b196c2ea4111@astart.com> Date: Sat, 10 Aug 2019 11:18:52 -0700 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Outbound-IP: 207.246.88.68 X-Env-From: papowell@astart.com X-Proto: esmtps X-Revdns: X-HELO: vultr.guest X-TLS: TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 X-Authenticated_ID: X-PolicySMART: 9383282 X-Virus-Status: Scanned by VirusSMART (b) X-Virus-Status: Scanned by VirusSMART (c) X-Rspamd-Queue-Id: 465Vjv3Mvxz40xn X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of papowell@astart.com has no SPF policy when checking 208.70.128.178) smtp.mailfrom=papowell@astart.com X-Spamd-Result: default: False [-3.61 / 15.00]; ARC_NA(0.00)[]; HAS_REPLYTO(0.00)[papowell@astart.com]; NEURAL_HAM_MEDIUM(-1.00)[-0.996,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.99)[-0.987,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-ports@freebsd.org]; TO_DN_NONE(0.00)[]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; HAS_ORG_HEADER(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; RCVD_TLS_LAST(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-0.996,0]; DMARC_NA(0.00)[astart.com]; R_SPF_NA(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[178.128.70.208.list.dnswl.org : 127.0.3.1]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16941, ipnet:208.70.128.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(-1.43)[ipnet: 208.70.128.0/24(-4.16), asn: 16941(-2.96), country: US(-0.05)]; FROM_EQ_ENVFROM(0.00)[] X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Aug 2019 18:19:00 -0000 On 2019-08-10 01:17, Martin Waschbüsch wrote: > Hi all, > > At least the last two versions of PHP, 5.6 & 7.0, were removed from ports as soon as (or even shortly before) they were no longer actively maintained upstream. > I am unsure what the exact reasoning behind this was, but I do not think it is a good idea moving forward: > > I suppose it is true that outdated & no longer supported versions of PHP could be seen as a security risk. So far so good. > > However, if, for whatever reason (and I think there are legitimate ones), I still need to use a now obsolete version of PHP, having them removed from ports effectively makes it harder for me to keep everything else up-to-date. > I might have to stick with an old ports revision so I cannot update other packages. > If I just keep PHP as is, and update other packages, I cannot easily switch to a new version of FreeBSD itself, because I'd have to go back to an old revision of ports (hopefully working with the OS version I updated to) to compile PHP and then do other packages. > Libraries / dependencies may change and break my PHP, etc. > So, on top of possible security concerns for the outdated software I use, I basically get an overall less secure / stable system to boot. > > Now, I am not suggesting we leave every old and outdated PHP version in ports, but why remove a port just days after it received its last security update upstream? (With PHP 5.6 it was actually removed from ports before it got its last update upstream). > > Would it not be better to have, say, the last two versions before current stable still in ports but with a huge disclaimer saying: use at your own risk, etc.? > > What do y'all think? > > Martin > _______________________________________________ > freebsd-ports@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-port Umm this was just the kick in the pants that I needed to switch to PHP 7. See https://www.glaver.org/blog/?p=1109 for a desperation 'I need PHP5.6' hack which I used during this update. I must say that the update to PHP 7 was relatively painless - there is PHP6 to PHP7 update support and lots of help/suggestions.   I also found an embarassing amount of bad PHP code during the update process,  something I should have suspected I would find. Note that the changes suggested by Mr. Glaver seem to be applicable to new versions of the Ports tree UPDATING and .../.mk files so you can use the latest Ports tree with the appropriate minor modifications.  You can even generate a script to apply these updates/mods each time you run 'portsnap'. But I digress... -- Patrick Powell Astart Technologies papowell@astart.com 1509 Hollow Ct., Network and System San Diego, CA 92019 Consulting Cell 858-518-7581 FAX 858-751-2435 Web: papowell at astart dot com