Hi Stefan. Unfortunately Debian's php maintainers had to drop the suhosin core patches (for now), as far as I understand mainly because of lack of man-power.
I've opened a bug: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657698 where I asked (or begged ;) ) them to add it back or (even better), provide packages for both, i.e.: with suhosin core patch applied (being the "default"): php5-* without suhosin core patch applied (for those who have troubles with it): php5-*-nosuhosin Now the question arose, whether any php extensions would notice and would have to be (re-)compiled for each of the two? So basically, is the ABI identical or not? Ideally of course, suhosin core patch would get merged upstream, perhaps with a runtime option to disable it, but I guess this remains dreaming, right? Thanks, Chris. btw: As long as Debian no longer applies suhosin core patch,... somewhere on the suhosin website you note that it would be automatically part of PHP in Debian; perhaps one should note that this may no longer be the case, in order not to lead users to wrong assumtions.
smime.p7s
Description: S/MIME cryptographic signature
