Bug#657698: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds

2012-02-02 Thread Pierre Joye
hi Stefan, On Thu, Feb 2, 2012 at 3:14 PM, Stefan Esser wrote: > Hello Pierre, > >> About the current flaw affecting 5.3/4, PHP and suhosin had bugs, and >> will have bugs. This is not really hot news. That does not affect this >> discussion. > > I know that for many years you have not understood

Bug#657698: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds

2012-02-02 Thread Pierre Joye
Hi Stefan, On Thu, Feb 2, 2012 at 2:31 PM, Stefan Esser wrote: > Hello Ondřej, > >> My personal feeling is that most people see suhosin as "this is about >> security, thus it must be good". This combined with bad PHP security >> history makes everybody feel insecure when suhosin was removed, but

Bug#321237: [php-maint] Bug#321237: Bug#321237: Bug#321237: Other related issues

2010-12-02 Thread Pierre Joye
hi, On Thu, Dec 2, 2010 at 5:19 PM, Ondřej Surý wrote: > The most information I got was from comments by Pierre Joye in: > https://bugs.launchpad.net/bugs/74647 > > And there was also bug in the compatibility layer > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543496 which I

Bug#380731: [php-maint] Bug#380731: understanding and kwow your place

2010-03-01 Thread Pierre Joye
HI, On Mon, Mar 1, 2010 at 7:49 AM, sean finney wrote: > hi pierre, > > i'd like to point out that while some of us have been making active > efforts to reach out and cooperate, your hyperbole makes it it very > difficult and demotivating to continue doing so.  fwiw, i also hope > the people on o

Bug#380731: understanding and kwow your place

2010-02-28 Thread Pierre Joye
hi, I find quite amusing to read the comments in this bug report. Steve Langasek's reply is simply too stupid to even be considered, yet another extremist who make Debian such a pain to use. However I can fully understand Steve as maintaining another SAPI is a lot of work, and from a time point o

Bug#425978: libgd2: Multiple issues in GIF loader

2007-05-25 Thread Pierre Joye
Package: libgd2 Version: 2.0.33 Severity: critical Tags: security patch Justification: breaks the whole system This patch fixes all known issues since 2.0.33 (upstream) in the gif loader. The tests are available in gd-2.0.34, 35RC4 or cvs (upstream), in tests/gif/ The issues fixed are segfaults,

Bug#425754: libgd2: Possible DoS with large angle and arc

2007-05-23 Thread Pierre Joye
Package: libgd2 Version: 2.0.33 Severity: normal Tags: patch Ref as #74 in bugs.libgd.org (http://bugs.libgd.org/?do=details&task_id=74) arc functions may take all CPU cycles when large angles are given. Patch to fix this issue: http://pierre.libgd.org/debian/bug00074.patch.txt -- System Inform

Bug#368096: debian bug 368096

2007-01-03 Thread Pierre Joye
Hello, On 1/2/07, Jonas Smedegaard <[EMAIL PROTECTED]> wrote: Please post directly to the bugreport when discussing them in specific. I have redirected this response, demonstrating the syntax :-) > While checking the current bug in debian libgd, I found the gnuplot > one (#368096). > http://bu

Bug#368096: debian bug 368096

2007-01-02 Thread Pierre Joye
Hello, On 1/2/07, Jonas Smedegaard <[EMAIL PROTECTED]> wrote: >> While checking the current bug in debian libgd, I found the gnuplot >> one (#368096). > > I forgot to mention that it does not segfault using CVS but using debian > libgd. I am happy to hear that. I was made aware of the new ups

Bug#332607: Date and the PHP License

2005-11-09 Thread Pierre Joye
On 11/9/05, Charles Fry <[EMAIL PROTECTED]> wrote: > For example, the Pear group could remove the PHP License from their list > of acceptable licenses, and encourage all packages released under the > PHP License to migrate to the practically equivilant BSD License. I will bring that to the group

Bug#332607: Date and the PHP License

2005-11-09 Thread Pierre Joye
Hello, I just read this bug report (did not see it as a debian bug, could be nice to put that in the subject), here is some clarifications: - The pear group does not work on this problem but have asked the PHP group (!). - We wait since a year to have a change, after having discussed this issue,

Bug#332607: Date and the PHP License

2005-11-09 Thread Pierre Joye
On 11/9/05, Charles Fry <[EMAIL PROTECTED]> wrote: > > Pierre Joy has already asked, and I have agreed to switch Date to the > > BSD license. I believe the other developers involved with the > > Date/TimeZone code have also agreed. > > > > If there is anything else I need to do, please let me know