[php-maint] [Pkg-php-commits] r1243 - php5/branches/etch/debian

[Moritz Muehlenhoff]

On Wed, Jan 28, 2009 at 09:05:13AM +0100, Thijs Kinkhorst wrote:
> Hi Sean,
> 
> On tiisdei 27 Jannewaris 2009, Sean Finney wrote:
> >   * Backport the patch from lenny/sid to use the system timezone database
> >     instead of the embedded php timezone database which is out of date.
> >     Patch: 143-use_embedded_timezonedb.patch (closes: #471104).
> >   * Repack the etch version of php5, stripping out the (unused) dbase
> >     module which contained licensing problems (closes: #498621).
> 
> Are you planning on letting this upload go through stable-security? Because 
> the changes listed above are not changes that are usually considered 
> appropriate for the security archive. Especially the latter change changes 
> the behaviour of php5 on stable which is not something expected to happen 
> with a mere security update.
> 
> I think an upload to security with the security fixes and after its release 
> one to stable with the other fixes may be the best way to go. CC'ing the 
> security team in case anyone has further comments.

Since the next php5 stable-security update after the stable update will
incorporate the changes from the stable update anyway, this seems like a
waste of ressources. We should treat ever-moving packages like PHP or the
kernel in a more reasonable way and just announce in the DSA that the
update incorporates changes, which would be added in the next point update
anyway.

Cheers,
        Moritz