As of 5.4.4-1ubuntu1 in quantal, Suhosin patch has been disabled. See
http://changelogs.ubuntu.com/changelogs/pool/main/p/php5/php5_5.4.6-1ubuntu1.5/changelog.
** Changed in: php5 (Ubuntu)
Status: Confirmed = Fix Released
** Tags added: precise
--
You received this bug notification
As of 5.4.4-1ubuntu1 in quantal, Suhosin patch has been disabled. See
http://changelogs.ubuntu.com/changelogs/pool/main/p/php5/php5_5.4.6-1ubuntu1.5/changelog.
** Changed in: php5 (Ubuntu)
Status: Confirmed = Fix Released
** Tags added: precise
--
You received this bug notification
This really needs to get addressed. Migrating to Ubuntu server just
cost me half a day of debugging to find Suhosin patch is baked into the
executable and is *NOT* being disabled through either .htaccess or
php.ini methods. I understand it's a good idea to provide this
additional security, but
This really needs to get addressed. Migrating to Ubuntu server just
cost me half a day of debugging to find Suhosin patch is baked into the
executable and is *NOT* being disabled through either .htaccess or
php.ini methods. I understand it's a good idea to provide this
additional security, but
Debian has no unfortunately dropped suhosin core patches from their php5
packages, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657698 .
Best solution IMHO would be to provide both, packages with the suhosin core
patches and without.
Default should be _with_ suhosin core patches and
Debian has no unfortunately dropped suhosin core patches from their php5
packages, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657698 .
Best solution IMHO would be to provide both, packages with the suhosin core
patches and without.
Default should be _with_ suhosin core patches and
This is kinda like a cosmic joke. Half of the sites does not work with
suhosin patch, yet you force it into your php5 build.
To my mind there should be just plain raw php5, and if user wishes so,
he can add himself suhosin or whatever he wants to.
Please make it raw.
--
You received this bug
This is kinda like a cosmic joke. Half of the sites does not work with
suhosin patch, yet you force it into your php5 build.
To my mind there should be just plain raw php5, and if user wishes so,
he can add himself suhosin or whatever he wants to.
Please make it raw.
--
You received this bug
Yes, to follow up on dgltmoon's post, we always disabled the extension
completely, and that's not the problem this bug is talking about. The
problem is that a patch to the PHP core is always applied in the Ubuntu
packages, and that always modifies behavior in ways that are both memory
and cpu
Yes, to follow up on dgltmoon's post, we always disabled the extension
completely, and that's not the problem this bug is talking about. The
problem is that a patch to the PHP core is always applied in the Ubuntu
packages, and that always modifies behavior in ways that are both memory
and cpu
@adconrad yes please don't assume that this fixes all problem, even by
setting suhosin to simulate mode only (as per your documentation link)
it still does not work with zend correctly, which makes it a real pain
for any PHP developers to use ubuntu based systems as their weapon of
choice.
--
@adconrad yes please don't assume that this fixes all problem, even by
setting suhosin to simulate mode only (as per your documentation link)
it still does not work with zend correctly, which makes it a real pain
for any PHP developers to use ubuntu based systems as their weapon of
choice.
--
I heartily agree with the person who filed this bug report!
Please issue a PHP without the suhosin patch, for those of us for whom
the patch creates more problems than it solves.
Baking the suhosin patch into the PHP distro has been very bad for those
of us whose Web services have been disrupted
I heartily agree with the person who filed this bug report!
Please issue a PHP without the suhosin patch, for those of us for whom
the patch creates more problems than it solves.
Baking the suhosin patch into the PHP distro has been very bad for those
of us whose Web services have been disrupted
A bit late to the party here, but have you tried disabling various
suhosin features in php.ini? There's a fairly comprehensive list at:
http://www.hardened-php.net/suhosin/configuration.html
Turning off things like transparent session encryption could see a
pretty drastic performance boost on
A bit late to the party here, but have you tried disabling various
suhosin features in php.ini? There's a fairly comprehensive list at:
http://www.hardened-php.net/suhosin/configuration.html
Turning off things like transparent session encryption could see a
pretty drastic performance boost on
** Changed in: php5 (Ubuntu)
Status: New = Confirmed
--
Need package for php5 without suhosin patch
https://bugs.launchpad.net/bugs/498022
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.
--
Ubuntu-server-bugs
** Changed in: php5 (Ubuntu)
Status: New = Confirmed
--
Need package for php5 without suhosin patch
https://bugs.launchpad.net/bugs/498022
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
** Changed in: php5 (Ubuntu)
Importance: Undecided = Wishlist
--
Need package for php5 without suhosin patch
https://bugs.launchpad.net/bugs/498022
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.
--
Ubuntu-server-bugs
** Changed in: php5 (Ubuntu)
Importance: Undecided = Wishlist
--
Need package for php5 without suhosin patch
https://bugs.launchpad.net/bugs/498022
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
20 matches
Mail list logo
