[php-maint] Bug#657698:

[Thomas Goirand]

On 01/30/2012 07:09 AM, Christoph Anton Mitterer wrote:
> I've opened a bug:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657698
> where I asked (or begged ;) ) them to add it back or (even better),
> provide packages for both

Asking or even begging wont unfortunately help to find the necessary
time for the PHP maintainers to work on suhosin. Do you have some skills
that you could lend for this work?

On 01/30/2012 07:09 AM, Christoph Anton Mitterer wrote:
> Ideally of course, suhosin core patch would get merged upstream, perhaps
> with a runtime option to disable it, but I guess this remains dreaming,
> right?

If you didn't get in touch with upstream and not pushing for this to
happen, yes you are dreaming! I really would recommend you to do such
communication. Maybe upstream will only take few of the features, but
that's be nice already.

> btw: As long as Debian no longer applies suhosin core patch,...
> somewhere on the suhosin website you note that it would be automatically
> part of PHP in Debian; perhaps one should note that this may no longer
> be the case, in order not to lead users to wrong assumtions.

There as well. If you aren't participating to the maintenance of PHP in
Debian, at least you can try to get in touch with upstream for suhosin
and get them amend their site. That would really be some help.

But if I'm not mistaking, one of the other reasons why we're going on
the direction to drop the suhosin patch/modules, is because upstream
isn't reactive enough. So good luck with the sohosin website update!

Cheers,

Thomas