On Tue, 2012-01-31 at 04:50 +0800, Thomas Goirand wrote: > Do you have some skills > that you could lend for this work? Well as said, I'm really no PHP expert and basically just forced to use it ;) ...
> If you didn't get in touch with upstream and not pushing for this to > happen, yes you are dreaming! I really would recommend you to do such > communication. Maybe upstream will only take few of the features, but > that's be nice already. Well... I guess Stefan would have to push for this, as maintainer of suhosin,... and probably it's difficult to get it merged,... see similar problems with PaX<->Linux kernel. > If you aren't participating to the maintenance of PHP in > Debian, at least you can try to get in touch with upstream for suhosin > and get them amend their site. That would really be some help. > > But if I'm not mistaking, one of the other reasons why we're going on > the direction to drop the suhosin patch/modules, is because upstream > isn't reactive enough. So good luck with the sohosin website update! Well it seems Stefan is listening now,... if all calm down a bit and be friendly to each other again, the real goal could be reached: More security for more end users. I guess this is what Debian maintainers want (otherwise they wouldn't have added the patch in the first place) and this is what Stefan wants (otherwise he wouldn't have written it). And it's not just the Debian users, that would profit, but also Ubuntu and (probably) all other derivatives. Cheers, Chris.
smime.p7s
Description: S/MIME cryptographic signature