[HowTo] PHP5 cgi with bundled gd

[hbaes]

raphael Wrote:And the benefit is...?
The php package in Debian doesn't use the bundled library because of security reasons.
When a shared library has a security bug and is fixed all the binaries using that library are 'safe'. But if the bundled library code isn't fixed php would still be vulnerable (and let me tell you something, the security team won't fix the bundled one).

This is a fix one, save them all v.s. a fix ALL, waste your time situation; of course Debian uses the former approach (others should do too, why aren't the changes in the bundled libgd2 code included by the main libgd2 library?)

Hi Raphael,

The Benefit ist that the bundled GD Library ist mostly more up to date then the external GD.

As the PHP Developers say:

PHP Code:

Since PHP 4.3 there is a bundled version of the GD lib. 
This bundled version has some additional features like alpha blending, 
and should be used in preference to the external library 
since its codebase is better maintained and more stable.