tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Changing to a more recent-ish PHP_VERSION_DEFAULT ?



Hi,

In message <38745a6f-13e2-48f3-89e0-2302ab436f33%NetBSD.org@localhost>
	on Thu, 9 Nov 2023 11:58:29 +0100,
	Jean-Yves Migeon <jym%NetBSD.org@localhost> wrote:
> My concern is that as 7.4 has been EOL for a bit now, most
> vulnerability reports will ignore that version for CPE version checks,
> so pkg_admin audit might likely not report CVEs that would be
> otherwise visible for 8.0 and up
> 
> Build breaks are easily caught by bulkbuilds, runtime ones is another
> matter -- do you think I should wait for Q4 and then make the change
> to give it more time? Or proceed anyway?
For default PHP version, we should not wait for Q4 and should switch
to 8.1.  I hope to do so in a few weeks.

-- 
Takahiro Kambe <taca%NetBSD.org@localhost>


Home | Main Index | Thread Index | Old Index