[php-maint] Bug#696470: php5-suhosin: php5-common make php5-suhosin defective

Jan Wagner waja at cyconet.org
Tue Jun 4 12:41:25 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ondřej,

thanks for your reply.

Am 04.06.2013 13:59, schrieb Ondřej Surý:
> On Tue, Jun 4, 2013 at 1:31 PM, Jan Wagner <waja at cyconet.org 
> <mailto:waja at cyconet.org>> wrote: as this Break is unversioned, how
> is the plan to get a (maybe in the future) compatible php5-suhosin
> installed beside php5-common?
> 
> There's no plan since there's no suhosin.

Oh Ondřej, come on! This was not a question about the actual suhosin
status, but about the PHP packages.
With the actual PHP packages, it is not possible to install a package
named "php5-suhosin". Do you want to tell me, the PHP Maintainers
didn't consider that php5-suhosin maybe come back?

> Even if this problen can be solved for jessie and sid, what whould
> be the best way to provide a php5-suhosin package for wheezy (for
> example maybe via backports)?
> 
> You won't be able to use backports due PHP 5.5 in sid.

Maybe I'm dumb, but I actually don't see a problem, if there occure a
new suhosin upstream release, which maybe compatible with PHP 5.5 and
5.4. Did I oversee anything?

> If there's a new stable suhosin, we can always release new php 5.4
> via pu, but I think that it's not worth the trouble for wheezy.

- From my experiences with pu, this will likely rare happen til not.
Anyways this will add a big expense and even shifts a system where
php5-common and php5-suhosin can be installed along far in the future.

> Users can always use unpackaged extension with php5-dev.

Which unfortunately doesn't scale in larger setups.

Just my to cents, Jan.
- -- 
Never write mail to <waja at spamfalle.info>, you have been warned!
- -----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT d-- s+: a C+++ UL++++ P+ L+++ E--- W+++ N+++ o++ K++ w--- O M V-
PS PE Y++
PGP++ t-- 5 X R tv- b+ DI D+ G++ e++ h---- r+++ y++++
- ------END GEEK CODE BLOCK------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFRreB09u6Dud+QFyQRAifJAJ97GSvD1FduS8SfWnB3myST8y774ACgorgN
2aR0vJOpnm9YQ4ToiNARKUk=
=3qGs
-----END PGP SIGNATURE-----



More information about the pkg-php-maint mailing list