<div dir="ltr">Well, as a new member on the Debian PHP team I could say that maintaining the patch took a lot of time. Each reported PHP problem was needed to understand whether it's because of the patch or not.<br><br>
Also, the upstream for the patch isn't very nice/cooperative so we decided to skip it. Another issue is having future versions support, as (AFAIK) there's not PHP 5.4 version of the patch, which is a problem as we we work towards uploading it as soon as it becomes an official version.<br>
<br>Kaplan<br><br><div class="gmail_quote">On Sat, Feb 25, 2012 at 11:21 PM, Omer Zak <span dir="ltr"><<a href="mailto:w1@zak.co.il">w1@zak.co.il</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Today, when I upgraded my old PC, which is running Debian Testing<br>
(currently Debian Wheezy), I was informed of the following:<br>
<br>
php5 (5.3.9-4) unstable; urgency=low<br>
<br>
* The Suhosin patch is now disabled in the default build.<br>
<br>
If you want to re-enable it again for your installation, you can<br>
set the option PHP5_SUHOSIN=yes in debian/rules and recompile PHP.<br>
<br>
-- Ondřej Surý <<a href="mailto:ondrej@debian.org">ondrej@debian.org</a>> Sat, 28 Jan 2012 08:39:36 +0100<br>
<br>
Does anyone know why did the packers decide to reverse the previous<br>
policy of installing PHP5 with the Suhosin patch by default?<br>
<br>
As far as I know, it would be rather inconvenient for a busy sysadmin to<br>
re-enable the Suhosin patch in PHP5 and rebuild it. Also, what'll<br>
happen if a newer version is released for the package (especially due to<br>
newly discovered security vulnerabilities)?<br>
<br>
--- Omer<br>
<br>
<br>
--<br>
PHP - the language of the Vogons.<br>
My own blog is at <a href="http://www.zak.co.il/tddpirate/" target="_blank">http://www.zak.co.il/tddpirate/</a><br>
<br>
My opinions, as expressed in this E-mail message, are mine alone.<br>
They do not represent the official policy of any organization with which<br>
I may be affiliated in any way.<br>
WARNING TO SPAMMERS: at <a href="http://www.zak.co.il/spamwarning.html" target="_blank">http://www.zak.co.il/spamwarning.html</a><br>
<br>
<br>
_______________________________________________<br>
Linux-il mailing list<br>
<a href="mailto:Linux-il@cs.huji.ac.il">Linux-il@cs.huji.ac.il</a><br>
<a href="http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il" target="_blank">http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il</a><br>
</blockquote></div><br></div>