On 10/24/13 18:43, Stuart Henderson wrote:
On 2013/10/24 18:26, Scott McEachern wrote:
I was wondering if there were any plans to incorporate suhosin into PHP
5.{4,5}, or should I just forget about it and move along anyway? Lack of
suhosin is the only reason I haven't moved on from 5.3.
If Suhosin upstream release a version for 5.4/5.5 I'd be interested in
adding it to the port but, as it is, my opinion is that you're better off
running a version that still gets security fixes..
Which, according to php.net, makes 5.3 still "ok" until Jul/2014:
"11-Jul-2013
The PHP development team announces the immediate availability of PHP
5.3.27. About 10 bugs were fixed, including a security fix in the XML
parser (Bug #65236).
*Please Note:* This will be the last regular release of the PHP 5.3
series. All users of PHP are encouraged to upgrade to PHP 5.4 or PHP
5.5. The PHP 5.3 series will receive only security fixes for
the next year."
But general bugfixes would be nice, too, so are you suggesting moving
to, say, 5.5?
--
Scott McEachern
https://www.blackstaff.ca
"Beware the Four Horsemen of the Information Apocalypse: terrorists, drug dealers,
kidnappers, and child pornographers. Seems like you can scare any public into allowing
the government to do anything with those four." -- Bruce Schneier
