Re: php 7.1 is way behind

Re: php 7.1 is way behind

[ddgjop+2hbgmlszz4.sharklasers.com via cygwin]

By the way, php pledges support for 7.1 branch until December of 2019 (Security only after Dec 1, 2018).  So it's reasonable that cygwin could stay with that for another year longer.





----
Sent using Sharklasers.com
Block or report abuse: https://www.sharklasers.com//abuse/?a=QlhzEgQOY7cMjxm9%2FjAcfRk%3D



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: php 7.1 is way behind

[ddgjop+2hbgmlszz4.sharklasers.com via cygwin]

I'm not talking about the 7.2 branch at all.  The 7.1 branch is still actively maintained and has had 3 updates since the last cygwin build.  There are known CVEs in some modules as well.  I don't know if cygiwn packages are affected by those CVEs.

For example 7.1.17 fixed THREE CVEs:
CVE-2018-10546
CVE-2018-10547
CVE-2018-10548

and released TWO months ago.





----
Sent using Sharklasers.com
Block or report abuse: https://www.sharklasers.com//abuse/?a=QlhzEgQOY7cMjxm9%2FjAcfRk%3D



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: php 7.1 is way behind

[Yaakov Selkowitz]

On 2018-06-27 23:40, dd92zi+2d7t34pt5a.sharklasers.com via cygwin wrote:
> Greetings.  Is anybody maintaining the php 7.1 packages for cygwin anymore? It's stuck at php 7.1.16 yet php 7.1 is up to 7.1.19 now.  Surely there are vulnerabilities that need to be addressed right?  Any info on this is appreciated.

An upgrade to 7.2 (among other updates) is currently blocked because of 
other issues on 32-bit:

https://github.com/cygwinports/ruby/pull/2

-- 
Yaakov

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

php 7.1 is way behind

[dd92zi+2d7t34pt5a.sharklasers.com via cygwin]

Greetings.  Is anybody maintaining the php 7.1 packages for cygwin anymore? It's stuck at php 7.1.16 yet php 7.1 is up to 7.1.19 now.  Surely there are vulnerabilities that need to be addressed right?  Any info on this is appreciated.





----
Sent using Sharklasers.com
Block or report abuse: https://www.sharklasers.com//abuse/?a=QlhzEgQOY7cMjxm9%2FjAcfRk%3D



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple