Re: 5.4.0 rc6 and release
| From: | Johannes Schlüter | Date: | Mon, 26 Mar 2012 23:09:20 +0000 |
| Subject: | Re: 5.4.0 rc6 and release | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-59170@lists.php.net to get a copy of this message | ||
On Mon, 2012-03-26 at 12:00 -0700, Clint Byrum wrote:
>
> Our hands are tied, as the security team still does not feel
> comfortable shipping a PHP without Suhosin. Perhaps more can be done
> to convince the world that this is a safe thing to do now, but for
> now, we're taking the extremely conservative stance and shipping
> 5.3.10 with the Suhosin patch.
>
> Thanks everyone for chiming in, and especially thanks to Ondrej for
> pushing hard to get things tested and rebuilt.
Thinking loud: One could also ship both. Yes this doubles the effort but
gives users a choice :-)
johannes