Re: Plan regarding fd patch...rc4

On Tue, 20 May 2003, Shane Caraveo wrote: > Zeev Suraski wrote: > > I'm kinda worried about those last-minute fastcgi (and CGI!). Last time > > we did that we had one of the biggest security holes in PHP's history. > > The fix in question is http://bugs.php.net/bug.php?id=23664, > which > leaves a feature completely broken. > If this is possibly to be the last release prior to 5, I think it should > go in. We can always release 4.3.3 ... I don't think that will be a problem to put the other fixes in there. THe problem that I face is that 4.3.2 might be the most stable release ever, but that whole opinion chance with the merging of the FD patch. Shane, I think this can go safely into 4.3.3, why not start with that right after 4.3.2 is released? And perhaps only put the fd and FastCGI patch in there so that the release cycle can be short and not affect our most stable 4.3.2 release. regards, Derick -- "my other box is your windows PC" ------------------------------------------------------------------------- Derick Rethans http://derickrethans.nl/ International PHP Magazine http://php-mag.net/ -------------------------------------------------------------------------