Comment 7 for bug 498022

Revision history for this message
Leo Plotkin (lplotkin) wrote :

This really needs to get addressed. Migrating to Ubuntu server just cost me half a day of debugging to find Suhosin patch is baked into the executable and is *NOT* being disabled through either .htaccess or php.ini methods. I understand it's a good idea to provide this additional security, but unfortunately the patch causes coredumps when processing large xml files in Zend and other happy fun errors that are simply not present in other Linux distributions.

Having to compile and maintain my own Suhosin-free packages is a solution, but not a good one.

It's a good idea, but is definitely *NOT* ready as a default.