[php-maint] 5.3.3 on unstable?

[Raphael Geissert]

On Wednesday 01 September 2010 11:49:50 sean finney wrote:
> hi,
> 
> I think that was the plan but we've been lacking in manpower to do so
> (5.3.3 has been in experimental for some time, at least).  i think life
> would be considerably easier on us and the security team post-release if
> we did have 5.3.3 in place already.

Yeah, that's the plan. I haven't had much time for anything (Debian-related) 
lately.

We could basically update one of the patches (the one Ondrej wrote), throw in 
some more and be done. I would however like to do something re the extensions 
stuff (not the migration to the extensions manager, since the RT already 
rejected that plan,) something trigger-based like what Sean proposed during 
DC10.

> On Wed, Sep 01, 2010 at 08:53:23PM +0900, Hideki Yamane wrote:
> > Hi,
> > 
> >  Just a question, is there any plan to put 5.3.3 into unstable?
> >  5.3.3 was released about one month ago and I don't see not so much wrong
> >  thing for that version.
> >  
> >  Pros)
> >  - 5.3.3 would fix one CVE bug

There are more than 6 CVEs fixed in 5.3.3 that still apply to sid as of today.

> >  - it wouldn't break compatibility (hopefully) and fix more than 100 bugs

There's one BC change re  the name of the class not being treated as 
constructor when a namespace is in use, but I'm not aware of any app in Debian 
being affected (would be surprised to see any app using namespaces and named 
constructors at the same time, instead of using __construct.)

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net