Web lists-archives.com

Fwd: Status of PHP support in stretch




Hi,

I originally sent this to debian-user and did not receive any replies
there. I thought I should retry here and maybe get a (more or less)
official response.

Regards,
Jochen.

----- Forwarded message from Jochen Spieker <ml@xxxxxxxxxxxxxxxx> -----

I noticed that PHP 7.0 is unsupported by upstream since the beginning of
2019:

https://secure.php.net/supported-versions.php

The most recent PHP version in stretch is, as of now, 7.0.33-0+deb9u1.
As far as I can tell, this is (roughly) the same as upstream 7.0.33 and
not a relabeled later upstream version and it does not contain
significant backports from later upstream versions.

Do I need to assume that PHP 7.0 in Debian is now only
security-supported by Debian alone? Is any DD close enough to upstream
to be able to at least backport new fixes from 7.1 and later if
necessary?

I found https://deb.sury.org/ which appears to be run by a DD[1]. But I
noticed that this version of PHP pulls in a different version of openssl
which rang some alarm bells with me. I would very much prefer something
more official, e.g. backpors.debian.org.

So, what do you do with your stretch servers running PHP now? Pray for
good support in Debian, upgrade to 3rd party packages? Upgrade to buster
already?

Regards,
Jochen.

[1] FWIW, the PGP key used for the repository (AC0E47584A7A714D) is
    signed by Ondřej Surý (0C99B70EF4FCBB07) which, in turn, is
    signed by 184 keys fro debian-keyring. The WoT probably does not get
    better than that.

----- End forwarded message -----

-- 
If I was a supermodel I would give all my cocaine to the socially
excluded.
[Agree]   [Disagree]
                 <http://archive.slowlydownward.com/NODATA/data_enter2.html>

Attachment: signature.asc
Description: PGP signature