[php-maint] Bug#668067: Bug#668067: [php5-common] Nonsensical part about configuration known to be inherently insecure in README.Debian.security

[Thijs Kinkhorst]

On Sun, April 8, 2012 18:31, Filipus Klutiero wrote:
> Package: php5-common
> Version: 5.4.1~rc1-1
> Severity: normal
>
> README.Debian.security starts:
>
>> The Debian stable security team does not provide security support for
>> certain configurations known to be inherently insecure. This includes
>> the interpreter itself, extensions, and user scripts written in the PHP
>> language.
>
> This is at least most unclear. How would the PHP interpreter be a
> configuration known to be inherently insecure?

If I add "features in", does it get clear to you what's meant?

| The Debian stable security team does not provide security support for
| certain configurations known to be inherently insecure. This includes
| features in the interpreter itself, extensions, and user scripts written
| in the PHP language. Most specifically, but not exclusively, the
| security team will not provide support for the following.


Cheers,
Thijs