[Secure-testing-team] Some updates about embedded code copies in WML and mp4h

[Thijs Kinkhorst]

Hi Axel,

On Wed, April 24, 2013 03:16, Axel Beckert wrote:
> libtool:
>   mp4h: Contains source code, but is compiled with --without-included-ltdl
>
>   	Next upload will also delete the source code before building
> 	to make sure it is not used.
>
>   wml: No more contains source code after repacking, see fix for #559841
>
>
> txt2html:
>   wml: No more contains source code after repacking, see fix for #576522

Thanks, both noted.

> pcre:
>   mp4h: Seems to embed version 3.9 of pcre3 (of 2002 *yuck*).
>
>         Current package in Debian uses the embedded copy. I though
> 	today managed[1] to build against the system copy of libpcre.a
> 	and at least the upstream test suite passed, so I suspect this
> 	should be fixable. Nevertheless I'll likely upload this change
> 	to experimental first, as e.g. unexpectedly no libpcre3 shows
> 	up in the dh_shlibdeps generated list of dependencies.

OK, so noted as embedding for now; please keep us informed when you solve
this.


Cheers,
Thijs