[php-maint] Fwd: [PHP-DEV] PHP 5.2.7 + magic_quotes_gpc broken
Raphael Geissert
atomo64+debian at gmail.com
Sun Dec 7 00:11:47 UTC 2008
Hi all,
Looks like 5.2.7 should not be uploaded, not even to unstable.
--------------- Forwarded message (begin)
Subject: [PHP-DEV] PHP 5.2.7 + magic_quotes_gpc broken
From: Scott MacVicar <scott at macvicar.net>
Date: Sat, 06 Dec 2008 14:35:42 -0600
Newsgroup: gmane.comp.php.devel
Hey,
There have been several bug reports about magic_quotes_gpc being
broken, at the moment in 5.2.7 the escaping is not performed even when
enabled. So any applications that attempt to undo the work of
magic_quotes_gpc will end up with problems.
I've backed out the bug that broke this #42718
Since this is a relative serious issue from a security stand point if
people rely on it being enabled and a potential data loss for those
trying to undo it, I'd like to see a release packaged asap.
If Ilia agrees then could fixes to the 5.2 branch be restricted to
build fixes only.
Scott
--------------- Forwarded message (end)
Cheers,
--
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net
More information about the pkg-php-maint
mailing list