[Secure-testing-team] Some updates about embedded code copies in WML and mp4h

Axel Beckert abe at debian.org
Wed Apr 24 01:16:23 UTC 2013


Hi,

as I'm currently working on a new upload of mp4h and I stumbled once
again over issues related to embedded code copies, I thought, I'll
check mp4h's and wml's state in
http://anonscm.debian.org/viewvc/secure-testing/data/embedded-code-copies?view=markup

I think there are some updates needed:


libtool:
  mp4h: Contains source code, but is compiled with --without-included-ltdl

  	Next upload will also delete the source code before building
	to make sure it is not used.

  wml: No more contains source code after repacking, see fix for #559841


txt2html:
  wml: No more contains source code after repacking, see fix for #576522


pcre:
  mp4h: Seems to embed version 3.9 of pcre3 (of 2002 *yuck*).

        Current package in Debian uses the embedded copy. I though
	today managed[1] to build against the system copy of libpcre.a
	and at least the upstream test suite passed, so I suspect this
	should be fixable. Nevertheless I'll likely upload this change
	to experimental first, as e.g. unexpectedly no libpcre3 shows
	up in the dh_shlibdeps generated list of dependencies.

[1] http://anonscm.debian.org/gitweb/?p=pkg-wml/mp4h.git;a=commitdiff;h=36289a811ef924b2787bcd1e533f3cacf2d79ed8

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe at debian.org>, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE
  `-    |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5



More information about the Secure-testing-team mailing list