[TYPO3-dev] is it time for PHP5.2.1 now?

[Franz Holzinger]

Steffen Müller a écrit :

> On 09.12.2009 05:48 Franz Holzinger wrote:
>>
>> If nobody opposes on this list, then I will start developing 
>> sr_feuser_register in PHP 5.2.1 in the next year.
>> All new bug fixes and features will require PHP 5.2.1 then.
>>
> 
> I guess users of Debian Etch would raise their hand, since they have 
> 5.2.0 and Etch is still supported.
> Urhhhhm, I am one of those users. *Oppose*
> 
> What's so different that you need 5.2.1 instead of 5.2.0?

IMHO PHP 5.2.0 contains too many security relevant bugs. Therefore the 
requirement should start with at least 5.2.1 or even better 5.2.2 which 
fixes security issues:
http://php.net/ChangeLog-5.php

Version 5.2.2
03-May-2007

     * Security Fixes
           o Fixed CVE-2007-1001, GD wbmp used with invalid image size
...

- Franz