On Mon, 2012-03-26 at 12:00 -0700, Clint Byrum wrote: > > Our hands are tied, as the security team still does not feel > comfortable shipping a PHP without Suhosin. Perhaps more can be done > to convince the world that this is a safe thing to do now, but for > now, we're taking the extremely conservative stance and shipping > 5.3.10 with the Suhosin patch. > > Thanks everyone for chiming in, and especially thanks to Ondrej for > pushing hard to get things tested and rebuilt.
Thinking loud: One could also ship both. Yes this doubles the effort but gives users a choice :-) johannes -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
