Re: Suhosin patch disabled by default in Debian php5 builds
| From: | Stefan Esser | Date: | Thu, 02 Feb 2012 16:40:09 +0000 |
| Subject: | Re: Suhosin patch disabled by default in Debian php5 builds | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57624@lists.php.net to get a copy of this message | ||
Hello Pierre,
> This is exactly where you should help php directly instead of doing
> what you do now to defend your patch. In the long run (or maybe even
> mid term), the Suhosin patch will disappear.
I seriously doubt that. The PHP developers will never ever merge all features into the PHP core. And
therefore Suhosin will continue to add additonal value.
Especially since the next Suhosin-Patch for PHP 5.4.0 will already have new and more mitigations.
Regards,
Stefan