Drop PHP 5.x

[aidantwoods]

Drop PHP 5.x

[aidantwoods]

Unfortunately PHP 5.4 won't be maintained till then (it is not maintained currently, or even recently). As said previous, having dead (and unsafe) software on LTS an issue for Ubuntu to work out for themselves. If you're using LTS with PHP 5.4 you should update PHP to a sane version 😉 (This'll probably work: https://gist.github.com/aidantwoods/bb26af07588c7fa6c68be237a1caf22c, only tested on Kali – still Debian though). If any environment is running PHP 5.4 (or EOL software in general) without a plan for updates, that's a huge red flag that you have more import issues to solve than HTTP headers.

…

On Thu, 3 Aug 2017 at 10:10, Jens Hausdorf ***@***.***> wrote: Once they started shipped it, it was the newest php version. And it is maintained until the mid of 2019. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#62 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADIvODJUUf-rvVilCCiScNS-ibZ86BRJks5sUY52gaJpZM4OrxmK> .

[franzliedke]

To be fair, using PHP 5.4 should be considered a security risk as well.

[jens1o]

I would not drop support for PHP 5.4, since the latest Ubuntu LTS version is served with that version. Then, you may not be able to use this library when you want things to be secure now.

[jens1o]

Well, it's that old, that hackers don't care about this (ancient) version. 😝

[aidantwoods]

I would not drop support for PHP 5.4, since the latest Ubuntu LTS version is served with that version. Then, you may not be able to use this library when you want things to be secure now.

If Ubuntu LTS is shipping with dead software then that's their problem to fix 😉
I've provided availability of this library for old versions, but it would be irresponsible to continue to support a security library on a software platform that can't hope to be secure itself (because it will never be updated).

As said this is a future goal (with no date as of yet), so no immediate drop of support. If it matters to you, please push relevant providers to use non EOL software before that future becomes present :)

[jens1o]

If Ubuntu LTS is shipping with dead software then that's their problem to fix 😉

Well, LTS version aren't provide up2date software, but only security release by definition.

[aidantwoods]

Ironic that they're shipping software that won't receive any security updates then, isn't it? 😉

…

On Thu, 3 Aug 2017 at 09:53, Jens Hausdorf ***@***.***> wrote: If Ubuntu LTS is shipping with dead software then that's their problem to fix 😉 Well, LTS version aren't provide up2date software, but only security release by definition. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#62 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADIvOGluSRCGzt1gtERGCiLDqZpdnevhks5sUYqPgaJpZM4OrxmK> .

[jens1o]

Once they started shipped it, it was the newest php version. And it is maintained until the mid of 2019.