Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:57650
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.170 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <72878E6C-4C17-4D94-9F73-1446769247E1@nopiracy.de>
References: <CALjhHG_wYvJn-Z+x9fJUi+dgmZ+Ha9BD54N5VwhneJM4sg1xBQ@mail.gmail.com>
	<5FB5CFDA-6FE8-4C20-A9B9-7844ED96659B@nopiracy.de>
	<CAEZPtU7jtQTDNpUovxxnDdRunjH9BOdX=WbS8JcGz+5Wkz8ocw@mail.gmail.com>
	<4F2A9378.70803@thelounge.net>
	<4F2AC9CA.2070308@sugarcrm.com>
	<4F2B2ED8.4050900@jimdo.com>
	<72878E6C-4C17-4D94-9F73-1446769247E1@nopiracy.de>
Date: Fri, 3 Feb 2012 10:25:18 +0100
Message-ID: <CAEZPtU5_WqrUDjEaz_WymAz-oe9rv19YBMCLC9ty_0VQqrb2sw@mail.gmail.com>
To: Stefan Esser <stefan@nopiracy.de>, =?UTF-8?B?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
Cc: Soenke Ruempler - Jimdo <soenke@jimdo.com>, PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds
From: pierre.php@gmail.com (Pierre Joye)

hi Stefan,

On Fri, Feb 3, 2012 at 9:24 AM, Stefan Esser <stefan@nopiracy.de> wrote:

> And it does not only look stupid to write such a mail at that moment it also shows how disconnected the Debian PHP maintainers are from what is happening around PHP.
> It also shows that the PHP devs seem to not like the Debian people, because otherwise they would have kept him in the loop. I know for a fact that Ubuntu and Redhat were informed.

Please state the facts. I did add Debian and Ubuntu to the discussions
on security@php.net. For all the issues you have reported yesterday
(and I do the same for other). I do not know if Ondrej is on the
security debian list, but that's up to them to deal with that.

Yes, as far as I know no more active members are part of the list, but
they are part of the security people on bugs.php.net. Reporting flaws
via bugs.php.net would be actually much better these days as more
people can read it (see the repo for their accounts) and it is
actually archived. And thisis also one of new good things we have
changed recently.

Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org