Best solution IMHO would be to provide both, packages with the suhosin core patches and without.
Default should be _with_ suhosin core patches and without one could name the packages like php5-xxx-no-suhosin or so.
Perhaps Debian and Ubuntu can contribute each other a little bith here?
Debian has no unfortunately dropped suhosin core patches from their php5 packages, see http:// bugs.debian. org/cgi- bin/bugreport. cgi?bug= 657698 .
Best solution IMHO would be to provide both, packages with the suhosin core patches and without.
Default should be _with_ suhosin core patches and without one could name the packages like php5-xxx-no-suhosin or so.
Perhaps Debian and Ubuntu can contribute each other a little bith here?
Cheers,
Chris.