Re: timing of PHP 5.6 security updates

To: debian-security@lists.debian.org
Subject: Re: timing of PHP 5.6 security updates
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Wed, 5 Oct 2016 22:02:50 +0200
Message-id: <[🔎] 20161005200250.43uu6ie6lx6jx2nf@eldamar.local>
Mail-followup-to: debian-security@lists.debian.org
In-reply-to: <[🔎] 20161005100601.GA9343@vandradlabs.com.au>
References: <[🔎] 20161005100601.GA9343@vandradlabs.com.au>

Hi Tomasz,

On Wed, Oct 05, 2016 at 09:06:02PM +1100, tmc wrote:
> Hi there
> 
> is there any news as to when the PHP 5.6 packages in Jessie will be updated 
> to provide fixes for the recent batch of issues - 
> 
> CVE-2016-7124 CVE-2016-7125 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 
> CVE-2016-7131 CVE-2016-7132 CVE-2016-7411 CVE-2016-7412 CVE-2016-7413
> CVE-2016-7414 CVE-2016-7416 CVE-2016-7417 CVE-2016-7418
> 
> I can see that there is package in sid that address most if not all of these.

No timeline yet, but we have asked the php5 maintainer if he can
prepare the usual update for jessie-security based on 5.6.26.

Regards,
Salvatore

Attachment: signature.asc
Description: PGP signature

Reply to:

Follow-Ups:
- Re: timing of PHP 5.6 security updates
  - From: tmc <tmc@vandradlabs.com.au>

References:
- timing of PHP 5.6 security updates
  - From: tmc <tmc@vandradlabs.com.au>

Prev by Date: timing of PHP 5.6 security updates
Next by Date: Re: timing of PHP 5.6 security updates
Previous by thread: timing of PHP 5.6 security updates
Next by thread: Re: timing of PHP 5.6 security updates
Index(es):
- Date
- Thread