On Wed, Jun 4, 2008 at 3:58 PM, Tormod Volden <[EMAIL PROTECTED]> wrote: > Mathias, shouldn't all security fixes go as SRU in hardy-security (or > hardy-updates) and not in backports? Backports are for new features.
A complete merge of 5.2.6 would constitute a backport, as the version has been bumped and new features have been added in addition to security fixes. Regarding SRU, see this comment: https://bugs.edge.launchpad.net/ubuntu/+source/php5/+bug/227464/comments/8 I painstakingly collected url's to each of the PHP commit messages of every security fix committed to PHP 5.2.6. We're going to work on applying each of those patches to PHP and proposing an SRU. It's just taking some time to get around to it ;-) If someone else can prepare a debdiff and attach to this bug, I'll be happy to review it. :-Dustin -- Please Backport PHP 5.2.6 -- fixes important security bugs https://bugs.launchpad.net/bugs/227464 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs