Hi, Thanks for the heads-up. As it turns out, this package is not duplicate source. It is a derived work made by Maarten Keijzer. The "librification" was done by him for the purpose of this module. If it is broken on 64-bit machines then I think I will need to remove it from the build. But that has yet to be demonstrated on this version. I am closing this bug until evidence to that effect comes to me. Thanks,
On Dec 28, 2007 7:37 PM, Guillem Jover <[EMAIL PROTECTED]> wrote: > Package: libcomplearn-mod-ppmd > Version: 1.0.6-1 > Severity: important > Tags: security > > Hi, > > This package contains an embedded copy of the ppmd source. It should > be using the external program instead for security reasons and to get > the benefits of the portability patches (also most probably the > binaries for the 64 bit arches are going to segfault, as the upstream > code is not 64 bit clean). > > regards, > guillem > > > -- "Our lives are determined by what we pay attention to; the quality of our lives is determined by the quality of our attention." -- Michael Wells -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
