Closed rychannel closed 6 years ago
I'm involved here only to help port core security fixes. So, unless Acquia or someone else commits to supporting pressflow 6 longer, then my assumption would be the same as Drupal 6 core:
https://www.drupal.org/d6-lts-support
in other words, 3 months.
For whatever it's worth, I'll keep testing and merging as long as there are official Drupal 6 releases.
I'm reopening this because it says the following on the D6 LTS project page (https://www.drupal.org/project/d6lts):
If you're looking for full releases of Drupal 6 core with [the LTS] patches included, check out the Pressflow 6 project on GitHub
Does that mean that the answer to this question has changed? I didn't see any statement on pressflow.org itself.
I would hope that my organization will be able to leave D6 behind in the next 3 months or so, but having this as a stopgap is greatly helpful.
From what I understand the D6 LTS team will make any backported fixes available in patch form on drupal.org.
Given that there will be no actual core tarballs with those fixes, I now think it would make sense to try to apply any D6 LTS core patches here and make additional pressflow releases, and that general intent is perhaps why mlhess put that note on drupal.org.
Thanks, pwolanin, that is helpful. I think you can consider this issue fixed now, then.
It doesn't appear that there have been any backported fixes for D6 core, correct? Does anyone know if there are security vulnerabilities in 6.38 that haven't been resolved?
@ochenk thoughts?
@evandonovan @fluxsauce Yes, I believe that's correct, that no security vulnerabilities have been publicly identified for 6.38. The D6LTS Team will post all D6 security patches here: https://www.drupal.org/project/d6lts and none have been posted since D6's eol.
Thanks - I just wanted to check because I have 3 D6 sites running Pressflow that I am probably going to be supporting until mid-spring, although I am working on migrating them. I thought maybe some of the recent D7 vulnerabilities would be vectors in D6 as well, but wasn't sure.
A very good question. Interested in the answer too.
Thanks