Comment 12 for bug 227464

Revision history for this message
Dustin Kirkland  (kirkland) wrote : Re: [Bug 227464] Re: Please Backport PHP 5.2.6 -- fixes important security bugs

On Wed, Jun 4, 2008 at 3:58 PM, Tormod Volden <email address hidden> wrote:
> Mathias, shouldn't all security fixes go as SRU in hardy-security (or
> hardy-updates) and not in backports? Backports are for new features.

A complete merge of 5.2.6 would constitute a backport, as the version
has been bumped and new features have been added in addition to
security fixes.

Regarding SRU, see this comment:
https://bugs.edge.launchpad.net/ubuntu/+source/php5/+bug/227464/comments/8

I painstakingly collected url's to each of the PHP commit messages of
every security fix committed to PHP 5.2.6. We're going to work on
applying each of those patches to PHP and proposing an SRU. It's just
taking some time to get around to it ;-) If someone else can prepare
a debdiff and attach to this bug, I'll be happy to review it.

:-Dustin