PHP 5.3.26 and PHP 5.4.16

[Imaging]

FYI, PHP 5.3.26 and PHP 5.4.16 are out:

http://php.net/archive/2013.php#id2013-06-06-2

in regards to updates for the atomic repo php packages. This update appears to have a security fix so hoepfully the 5.3.x packages will get this update if they are going to be discontinued soon due to the 5.4.x transition.

Thanks.

[scott]

5.4.16 just went up into atomic-testing for EL6 systems. We'll probably be transitioning to 5.4 next week or the week after.

Also CVE-2013-2110 does not effect any version of PHP if you are using the ASL kernel.

[prupert]

Will you please release the PHP 5.3.26 update in Atomic? Currently you are distributing PHP 5.3.25 that contains a critical security vulnerability (CVE-2013-2110).

There are lots of folks here that are using the Atomic PHP packages on non-ASL systems or whom don't have the opportunity to run the ASL kernel.

[faris]

Yes ... please please please on the 5.3?

[Imaging]

Yes, we'd sure like to see 5.3.26 released as well.

We'll ultimately transition but it will take a bit of time and in the meantime we'd like to be running the latest for systems without the ASL kernel.

Thanks.

[Imaging]

Scott:

Will you be able to do one more 5.3.x release for 5.3.26 so that we'll have a bit more time before we have to move to 5.4.x?

Thanks!

[scott]

One last 5.3 update is going up to atomic now. I'm too far along with 5.4 to handle any 5.3 support package updates (eaccelerator, ioncube, suhosin, etc) to reverse those for 5.3. That said, we have had some interest in continuing maintenance of the 5.3 branch as part of a special commercial archive. No final decisions have been made on this yet however if you are interested in that, reach out to sales@atomicorp.com to let them know this is something you might be interested in.

[Imaging]

Great, thanks!

[faris]

Thanks Scott. Email sent to sales

[mr_coko]

The current PHP 5.3.26 update breaks Apache PHP integration, as the included file /etc/httpd/conf.d/php.conf seems to miss LoadModule directives...

[scott]

Thanks, I removed 5.3.26 from the repo. We'll press forward with the 5.4 transition

[Imaging]

Scott:

Could you please not remove it from the repos? We still need to upgrade to .26 as we test transitioning to 5.4 so would appreciate it still being available. Is it possible to just rebuild the rpms with the needed LoadModule statments included?

Thanks!

[scott]

Yeah when the work on 5.4 is done, I'll go back and look at 5.3.