Re: Suhosin patch disabled by default in Debian php5 builds

hi Stefan, On Fri, Feb 3, 2012 at 9:24 AM, Stefan Esser <stefan@nopiracy.de> wrote: > And it does not only look stupid to write such a mail at that moment it also shows how > disconnected the Debian PHP maintainers are from what is happening around PHP. > It also shows that the PHP devs seem to not like the Debian people, because otherwise they > would have kept him in the loop. I know for a fact that Ubuntu and Redhat were informed. Please state the facts. I did add Debian and Ubuntu to the discussions on security@php.net. For all the issues you have reported yesterday (and I do the same for other). I do not know if Ondrej is on the security debian list, but that's up to them to deal with that. Yes, as far as I know no more active members are part of the list, but they are part of the security people on bugs.php.net. Reporting flaws via bugs.php.net would be actually much better these days as more people can read it (see the repo for their accounts) and it is actually archived. And thisis also one of new good things we have changed recently. Cheers, -- Pierre @pierrejoye | http://blog.thepimp.net | http://www.libgd.org