Re: Re: OpenSSL bug in 5.4.33 and 5.5.17
| From: | Stas Malyshev | Date: | Fri, 26 Sep 2014 08:09:18 +0000 |
| Subject: | Re: Re: OpenSSL bug in 5.4.33 and 5.5.17 | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-77651@lists.php.net to get a copy of this message | ||
Hi!
> In released 5.4.33 (and 5.5.17) you have 6569db8 + 84a4041 + 32be79d
> (notice I have revert these 3 patches for downstream)
>
> In 5.4/5.5/5.6 you have 6569db8 + 84a4041 + 32be79d + f86b219 + 3728449
> (all reverted in 5.6.1)
>
> As you said, "5.4 is now supposed to be security-only" so I rather
> think we should revert to 5.4.32 code and have the upcoming fix only
> in 5.5+ (so in 5.5.18RC and 5.6.2RC)
So, I have reverted the code for xp_ssl.c in 5.4 to it's status as of
5.4.32, and left 5.5 and above as is. Hopefully, this improves the
situation. I'd like to ask everybody involved to verify if there are no
more regressions caused by this.
Thanks,
--
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/