Necessary remove php when upgrade?

[toft6633]

I notice that Ondřej Surý is member of Debian developer team. https://nm.debian.org/members/

[TheFu]

I notice that Ondřej Surý is member of Debian developer team. https://nm.debian.org/members/

Great! Then when Debian makes a package, that's what I'd prefer over his personal PPA. If you've validated that his PPA has exactly the same files/packages as the Debian package, then perhaps it is worth using?

I've just been burned by being on the bleeding edge and like that Canonical has a security team to look over security patches and provide their expertise to it. Unless my server is down, I don't want to be on the newest code. But I don't use php webapps on the internet where there seem to be high risk of compromise.

[#&thj^%]

From the man himself:, It is safe to install php from ondrej/php ppa.

• WHO AM I?
  
• I am a Debian Developer since year 2000, and I have been packaging PHP for Debian since PHP 5. That means the official packages in Debian and Ubuntu are either my work or they are based on my work. The PHP packages in my Ubuntu PPA and Debian DPA matches the official packages in Debian. Basically I am saying that you can’t get any closer than that.
  
  Askubuntu : @oerdnj
  
• I am a Director of DNS Engineering at ISC, Debian Developer since 2000, Ubuntu Member since 2005, founding member of Ubuntu Česká Republika since 2004.
  
• I (co-)maintain Apache2, PHP, MariaDB, Cyrus SASL, Cyrus IMAP, Berkeley DB and all things DNS in Debian and also have semi-official PPAs for those packages (PHP). I have been member of Debian GNOME GTK+ packaging team. (In other words I've seen things you people wouldn't believe. )

The developer is preparing a newcomer package debsuryorg-archive-keyring to automatically update the PGP key.

The apt-key list should print:

pub   rsa1024 2009-01-26 [SC]
      14AA 40EC 0831 7567 56D7  F66C 4F4E A0AA E526 7A6C
uid           [ unknown] Launchpad PPA for Ondřej Surý

Source: https://askubuntu.com/questions/1333...hp-8-0-package

I still agree with TheFu unless you can verify the stack is identical, then it is like playing a game of chance.