Hi again.
1) We recently saw several CVEs on php5...
I think it would be nice for the records in this ticket, to see which
of them would have been avoided by the use of suhosin-core-patch,
suhosin-module or both.
Is there an overview? Stefan, any ideas?
And rather unrelated to that particular Debian bug:
2) I know we talked about that before and there have been probably
plenty of discussions elsewhere where I was not involved, but...
... now that PHP 5.4 is out ...
Is there any chance or at least space to talk between suhosin and php
upstream, about an inclusion of the former in the later (i.e. on a basis
that one can enable/disable it via an ini setting or so)?
I know there are arguments pro and contra such a inclusion,... but IMHO
the biggest one is security for the end-user, and that would clearly be
improved by including it upstream (and perhaps even enabling it per
default).
Cheers,
Chris.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
