[php-maint] Bug#696470: php5-suhosin: php5-common make php5-suhosin defective

Jan Wagner waja at cyconet.org
Tue Jun 4 14:57:16 UTC 2013

Hash: SHA1

Hi Ondřej,

Am 04.06.13 16:32, schrieb Ondřej Surý:
> Okay ... we should have had talked a bit much more about this
> topic. With suhosin abounded upstream, I didn't follow your
> packaging very close, so I wasn't aware of the issue (as the change
> was on your side, I would have wished you pinged me). Anyways,
> there was also the #662637-debacle, so this messed the situation
> more than needed.
> The Breaks was added to prevent a gazillion of:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680145
> type of bugs filled.  (Which would happen.)

Indeed, as the module was not loaded (due it's missing config in
correct place for PHP 5.4), this should not have been a problem for
the php5 source package and it's reported against php5-suhosin.

Anyways, I still would love a bit more communication, when directly
affecting other packages with actions. But I also can understand, that
there are a couple of php packages around.

Maybe you could with the next upload to wheezy include a versioned
Break against "php5-suhosin (<=0.9.33-3)", which doesn't hurt anyone
but give us the option to get a php5-suhosin installed on wheezy

> Anyways ... looking into 
> https://github.com/stefanesser/suhosin/issues/20#issuecomment-15631909
and even in
> https://github.com/stefanesser/suhosin/issues/27#issuecomment-18741064
makes me cautiously optimistic.
> I won't believe it until I see the code. Empty promises cost
> nothing.

We'll see ... as long as we'll migrate away from single point of
esser, this will be an improvement. :-)

Cheers, Jan.

Version: GnuPG v1.4.12 (Darwin)
Comment: GPGTools - http://gpgtools.org


More information about the pkg-php-maint mailing list