Re: 4.1.2
| From: | Rasmus Lerdorf | Date: | Sat, 02 Mar 2002 01:03:16 +0000 |
| Subject: | Re: 4.1.2 | ||
| References: | 1 | Groups: | php.qa |
| Request: | Send a blank email to php-qa+get-4432@lists.php.net to get a copy of this message | ||
None of the other patches have so far proven to be troublesome. Each
complaint I have looked into so far have been user error or local system
changes that happened since they compiled 4.1.1.
-Rasmus
On Sat, 2 Mar 2002, Zeev Suraski wrote:
> Going through QA was not an option given the security issue at hand. I was
> personally in favour of releasing 4.1.2 with the security fix only, but I
> didn't really push my opinion too hard, and it got out with a few other
> patches as well. Again, going through QA was simply not an option.
>
> Zeev
>
> At 20:54 01/03/2002, Karl Austin wrote:
> >Hi,
> >
> >I'd just like to voice my concern that 4.1.2 didn't go through QA when
> >it obviously needed too as more than just the code to fix the file
> >upload security hole had changed. I just tried to compile 4.1.2 with
> >mcrypt support and it failed, yet it works perfect with a patched copy
> >of 4.1.1 - surely 4.1.2 should be the exact same code as a patched 4.1.1
> >is? I appreciate that there was a need to get 4.1.2 out quickly, but
> >surely the best idea would have been to just change the few lines of
> >code for the file upload and leave it at that?
> >
> >Thanks,
> >
> >Karl
> >
> >
> >--
> >PHP Quality Assurance Mailing List
> ><http://www.php.net/>
> >To unsubscribe, visit: http://www.php.net/unsub.php
>
>
> --
> PHP Quality Assurance Mailing List <http://www.php.net/>
> To unsubscribe, visit: http://www.php.net/unsub.php
>