[php-maint] Bug#696470: php5-suhosin: php5-common make php5-suhosin defective

[Jan Wagner]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ondřej,

Am 04.06.13 16:32, schrieb Ondřej Surý:
> Okay ... we should have had talked a bit much more about this
> topic. With suhosin abounded upstream, I didn't follow your
> packaging very close, so I wasn't aware of the issue (as the change
> was on your side, I would have wished you pinged me). Anyways,
> there was also the #662637-debacle, so this messed the situation
> more than needed.
> 
> 
> The Breaks was added to prevent a gazillion of:
> 
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680145
> 
> type of bugs filled.  (Which would happen.)

Indeed, as the module was not loaded (due it's missing config in
correct place for PHP 5.4), this should not have been a problem for
the php5 source package and it's reported against php5-suhosin.

Anyways, I still would love a bit more communication, when directly
affecting other packages with actions. But I also can understand, that
there are a couple of php packages around.

Maybe you could with the next upload to wheezy include a versioned
Break against "php5-suhosin (<=0.9.33-3)", which doesn't hurt anyone
but give us the option to get a php5-suhosin installed on wheezy
afterwards?

> Anyways ... looking into 
> https://github.com/stefanesser/suhosin/issues/20#issuecomment-15631909
>
> 
and even in
> https://github.com/stefanesser/suhosin/issues/27#issuecomment-18741064
>
> 
makes me cautiously optimistic.
> 
> 
> I won't believe it until I see the code. Empty promises cost
> nothing.

We'll see ... as long as we'll migrate away from single point of
esser, this will be an improvement. :-)

Cheers, Jan.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAlGuAEwACgkQ9u6Dud+QFySdnwCggZeca9MBJbslrQ2IHwWK9Fys
0CQAoJ77rn8YvC2f5Nh5RN6/mTS3Z+SV
=KJHZ
-----END PGP SIGNATURE-----