Re: dangerous handling of security bugs

It would be really relaxter if there are easy patches available which i could use in rpm-spec-file in a way like the following - the orinial source-tarball is unchanged and rpmbuild applys the patches diectly before build We are rebuilding php on our own based on fedora-srpm and so this could be done very smooth %define _default_patch_fuzz 2 Patch1: php-5.3.2-gnusrc.patch Patch2: php-5.3.0-install.patch Patch3: php-5.2.4-norpath.patch Patch4: php-5.3.0-phpize64.patch Patch5: php-5.2.0-includedir.patch Patch6: php-5.2.4-embed.patch Patch7: php-5.3.0-recode.patch Patch9: php-5.3.2-phar.patch Patch20: php-4.3.11-shutdown.patch Patch21: php-5.2.3-macropen.patch Patch40: php-5.0.4-dlopen.patch Patch41: php-5.3.0-easter.patch Patch42: php-5.3.0-systzdata-v6.patch Patch61: php-5.0.4-tests-wddx.patch Patch91: php-5.3.2-oci8conf.patch Patch100: suhosin-patch-5.3.2-0.9.9.1.patch.gz Am 12.07.2010 15:38, schrieb Rasmus Lerdorf: > Right, so the ISP that offers this low-end hosting has to keep up to > speed with their distros' security patches. We work with the distros > and CVEs are issued for security problems. They are the ones providing > what people like that install anyway, not us. > > -Rasmus -- Mit besten Grüßen, Reindl Harald the lounge interactive design GmbH A-1060 Vienna, Hofmühlgasse 17 software-development / cms-solutions p: +43 (1) 595 3999 33, m: +43 (676) 40 221 40 icq: 154546673, http://www.thelounge.net/