Debian Bug report logs - #662126
[php5] FTBFS with PHP5_SUHOSIN=yes

[Message part 1 (text/plain, inline)]
Package: php5
Version: 5.4.0-1
Severity: important

--- Please enter the report below this line. ---
Buildlog attached.

Regards Alf Gaida

--- System information. ---
Architecture: amd64
Kernel:       Linux 3.2-9.towo.1-siduction-amd64

Debian Release: wheezy/sid
  990 unstable        debian.alfgaida.de
  500 unstable        packages.siduction.org
  500 unstable        ftp.debian.org
  500 testing         ftp.debian.org
  500 stable          www.scootersoftware.com
  500 stable          ftp.debian.org
  500 experimental    packages.siduction.org
    1 experimental    ftp.debian.org

--- Package information. ---
Depends                           (Version) | Installed
===========================================-+-==============
libapache2-mod-php5           (>= 5.4.0-1)  | 5.4.0-1
 OR libapache2-mod-php5filter (>= 5.4.0-1)  |
 OR php5-cgi                  (>= 5.4.0-1)  | 5.4.0-1
 OR php5-fpm                   (>= 5.4.0-1) | 5.4.0-1
php5-common                    (>= 5.4.0-1) | 5.4.0-1

Package's Recommends field is empty.

Package's Suggests field is empty.

[php5_5.4.0-1.1.build (text/plain, attachment)]
severity 662126 minor
thank you

There's no suhosin patch for PHP 5.4. The patch will be updated as
soon as there is one.

O.

On Sun, Mar 4, 2012 at 11:24, info@g-com.eu <info@g-com.eu> wrote:
> Package: php5
> Version: 5.4.0-1
> Severity: important
>
> --- Please enter the report below this line. ---
> Buildlog attached.
>
> Regards Alf Gaida
>
> --- System information. ---
> Architecture: amd64
> Kernel:       Linux 3.2-9.towo.1-siduction-amd64
>
> Debian Release: wheezy/sid
>  990 unstable        debian.alfgaida.de
>  500 unstable        packages.siduction.org
>  500 unstable        ftp.debian.org
>  500 testing         ftp.debian.org
>  500 stable          www.scootersoftware.com
>  500 stable          ftp.debian.org
>  500 experimental    packages.siduction.org
>    1 experimental    ftp.debian.org
>
> --- Package information. ---
> Depends                           (Version) | Installed
> ===========================================-+-==============
> libapache2-mod-php5           (>= 5.4.0-1)  | 5.4.0-1
>  OR libapache2-mod-php5filter (>= 5.4.0-1)  |
>  OR php5-cgi                  (>= 5.4.0-1)  | 5.4.0-1
>  OR php5-fpm                   (>= 5.4.0-1) | 5.4.0-1
> php5-common                    (>= 5.4.0-1) | 5.4.0-1
>
>
> Package's Recommends field is empty.
>
> Package's Suggests field is empty.
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint

-- 
Ondřej Surý <ondrej@sury.org>

Hi.

It seems that there's "initial" support for 5.4.x PHPs in the suhosin 
git now.

I haven't checked due to lack of time, but does anyone now, whether 
suhosin would have prevent the most recent disastrous security hole in 
PHP? If so,... would be a strong argument supporting my wish in #657698.

Cheers,
Chris.

On Wed, 09 May 2012, Christoph Anton Mitterer wrote:

> Hi.
> 
> It seems that there's "initial" support for 5.4.x PHPs in the
> suhosin git now.
> 
> I haven't checked due to lack of time, but does anyone now, whether
> suhosin would have prevent the most recent disastrous security hole
> in PHP? If so,... would be a strong argument supporting my wish in
> #657698.
nothing changed to #669972. 

We won't do uploads of unreleased suhosin. Full stop.

Alex

[Message part 1 (text/plain, inline)]
On Wed, 2012-05-09 at 22:13 +0200, Alexander Wirt wrote:
> nothing changed to #669972.
Ah, I haven't seen that one,... nevertheless it's good to have my note
about progress on the upstream side and your note about #669972 int
these bugs now.

> We won't do uploads of unreleased suhosin.
Yeah,... well guess that's up to you... but it seems as this is actually
some final version (at least according to the changelog) and Stefan just
haven't made a tarball out of it yet.

> If it has security problems some php ***** will start a
> debian shitstorm
Well that can always happen, right? Even if it's in the form of a
tar.something ;)

Cheers,
Chris.

[smime.p7s (application/x-pkcs7-signature, attachment)]
So closing bugs related to it.

O.
--
Ondřej Surý <ondrej@sury.org>

Debian Bug report logs - #662126 [php5] FTBFS with PHP5_SUHOSIN=yes

Debian Bug report logs - #662126
[php5] FTBFS with PHP5_SUHOSIN=yes