From owner-freebsd-ports@FreeBSD.ORG Wed Feb 8 13:10:09 2012 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EC3881065670 for ; Wed, 8 Feb 2012 13:10:09 +0000 (UTC) (envelope-from 000.fbsd@quip.cz) Received: from elsa.codelab.cz (elsa.codelab.cz [94.124.105.4]) by mx1.freebsd.org (Postfix) with ESMTP id 9DB358FC15 for ; Wed, 8 Feb 2012 13:10:09 +0000 (UTC) Received: from elsa.codelab.cz (localhost [127.0.0.1]) by elsa.codelab.cz (Postfix) with ESMTP id 255AE28424; Wed, 8 Feb 2012 13:54:49 +0100 (CET) Received: from [192.168.1.2] (ip-86-49-61-235.net.upcbroadband.cz [86.49.61.235]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by elsa.codelab.cz (Postfix) with ESMTPSA id D09ED2842D; Wed, 8 Feb 2012 13:54:47 +0100 (CET) Message-ID: <4F327097.6080006@quip.cz> Date: Wed, 08 Feb 2012 13:54:47 +0100 From: Miroslav Lachman <000.fbsd@quip.cz> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.1.19) Gecko/20110420 Lightning/1.0b1 SeaMonkey/2.0.14 MIME-Version: 1.0 To: Doug Barton References: <201202070829.q178TNZw081740@portsmonj.FreeBSD.org> <4F31CEEC.5020300@FreeBSD.org> In-Reply-To: <4F31CEEC.5020300@FreeBSD.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Svyatoslav Lempert , freebsd-ports@freebsd.org, Alex Dupre Subject: Re: FreeBSD ports which are currently scheduled for deletion X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Feb 2012 13:10:10 -0000 Doug Barton wrote: > On 02/07/2012 17:13, Svyatoslav Lempert wrote: >> 2012/2/7: >>> The ports, and the reason and date that they have been scheduled >>> for removal, are listed below. If no one has stepped forward before >>> that time to propose a way to fix the problems (such as via a PR), >>> the ports will be deleted. >>> >>> portname: lang/php52 >>> description: PHP Scripting Language >>> maintainer: admin@lissyara.su >>> deprecated because: PHP 5.2 series is not supported anymore, migrate now >>> expiration date: 2012-03-01 >>> build errors: none. >>> overview: http://portsmon.FreeBSD.org/portoverview.py?category=lang&portname=php52 >>> >> >> Why so much wish to remove lang/php52? > > There are numerous security vulnerabilities in it, and so far no one has > stepped up to thoroughly address them. If you'd like to volunteer to > maintain this version that would be great. Just submit the PR with the > following updates: > > All security patches backported > Fix the dependent ports (php52-*) to use the same patches as lang/php52 > > That's off the top of my head ... there may be other problems. Are you sure there are any known security vulnerabilities not fixed in lang/php52? I think that current maintainer Alex Keda is doing exelent work with backporting all needed patches to have working and secure PHP 5.2.x in FreeBSD ports tree, so there is no need to remove this port. Migrating from 5.2 to 5.3 or any future version is not possible without modification of PHP scripts. Webhosting servers with old applications must stay with 5.2 until all clients migrate their code to newer version. The last version of PHP 4.4 was released 07-Aug-2008 and is still in ports tree, last version of 5.2 was released 06-Jan-2011 and is well maintained with security patches. I don't see any good reason to remove the port, which have active maintainer fixing all known problems / security vulnerabilities. Miroslav Lachman