Comments on: May is the month of PHP security http://www.dotdeb.org/2010/05/04/may-is-the-month-of-php-security/?utm_source=rss&utm_medium=rss&utm_campaign=may-is-the-month-of-php-security The repository for Debian-based LAMP servers Tue, 07 Feb 2012 13:02:44 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Mary Slotswile, http://www.dotdeb.org/2010/05/04/may-is-the-month-of-php-security/comment-page-1/#comment-22119 Mary Slotswile, Sun, 03 Jul 2011 10:45:39 +0000 http://www.dotdeb.org/?p=349#comment-22119 Hi, Lonnie Waugh i do agree with you. Hi, Lonnie Waugh i do agree with you.

]]> By: Lonnie Waugh http://www.dotdeb.org/2010/05/04/may-is-the-month-of-php-security/comment-page-1/#comment-2539 Lonnie Waugh Tue, 29 Jun 2010 14:59:33 +0000 http://www.dotdeb.org/?p=349#comment-2539 I had tried upgrading to the current 5.3 release which did in fact correct the RSS issues that we were seeing, but it also broke many things. Squeeze is based on 5.3 isn't it? the problem I have is that I run a web server that hosts a couple hundred client sites, most of which are PHP/MySQL .. so I have to be cautious what I do. The upgrade to the dotdeb 5.2.12 ( and now 13 ) was because of a PCI compliance issue. The only issue I have currently is the issue with RSS feeds being broken due to the old libxml.. a major upgrade is always frightening :) I had tried upgrading to the current 5.3 release which did in fact correct the RSS issues that we were seeing, but it also broke many things.

Squeeze is based on 5.3 isn’t it? the problem I have is that I run a web server that hosts a couple hundred client sites, most of which are PHP/MySQL .. so I have to be cautious what I do. The upgrade to the dotdeb 5.2.12 ( and now 13 ) was because of a PCI compliance issue.

The only issue I have currently is the issue with RSS feeds being broken due to the old libxml.. a major upgrade is always frightening :)

]]> By: Guillaume Plessis http://www.dotdeb.org/2010/05/04/may-is-the-month-of-php-security/comment-page-1/#comment-2538 Guillaume Plessis Tue, 29 Jun 2010 07:54:43 +0000 http://www.dotdeb.org/?p=349#comment-2538 @Loonie Waugh : the problem is the same as with MySQL libraries. Building PHP against another libxml will lead to conflicts, duplicate symbols and then segfaults as soon as Apache is invoked, since it's build against libxml too. And I won't take the risk of backporting a newer libxml2. It would impact DNS resolving, Apache and so on... Sorry. Squeeze is near, be patient. @Loonie Waugh : the problem is the same as with MySQL libraries. Building PHP against another libxml will lead to conflicts, duplicate symbols and then segfaults as soon as Apache is invoked, since it’s build against libxml too.

And I won’t take the risk of backporting a newer libxml2. It would impact DNS resolving, Apache and so on…

Sorry. Squeeze is near, be patient.

]]> By: Lonnie Waugh http://www.dotdeb.org/2010/05/04/may-is-the-month-of-php-security/comment-page-1/#comment-2537 Lonnie Waugh Mon, 28 Jun 2010 17:50:31 +0000 http://www.dotdeb.org/?p=349#comment-2537 I love what you're doing here but I noticed an issue, the package contains an old version of libxml and it's broken things like magpie and simplepie .. Any way this can be compiled against a newer libxml? It shows version 2.6.32 which is quite outdated.. I love what you’re doing here but I noticed an issue, the package contains an old version of libxml and it’s broken things like magpie and simplepie ..

Any way this can be compiled against a newer libxml?

It shows version 2.6.32 which is quite outdated..

]]>