[php-maint] Debian Lenny: php5 auto-bundled with suhosin?

sean finney seanius at debian.org
Sat Aug 2 17:12:14 UTC 2008


for future reference please use the official point of contact for the package 
(the Maintainer field, who is now cc'd) for questions about the package.

On Saturday 02 August 2008 09:17:07 am Günter Grodotzki wrote:
> I was wondering why since a long-time of debian-lenny I am only anymore
> able to get php5 bundled together with suhosin.

because the php codebase is full of holes, and the suhosin patch offers 
additional protection that can help mitigate some of these problems from 
being "remote code execution" to only "application crash".  therefore we have 
no interest in maintaining an unpatched version.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.alioth.debian.org/pipermail/pkg-php-maint/attachments/20080802/f282ee90/attachment.pgp 

More information about the pkg-php-maint mailing list