Your message dated Mon, 7 Dec 2009 09:17:02 +1100
with message-id <[email protected]>
has caused the   report #559616,
regarding heimdal: Ships and links against an embedded code copy of sqlite
to be marked as having been forwarded to the upstream software
author(s) [email protected]

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
559616: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559616
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Hello,

I received this bug report against Heimdal, in Debian.

Would it be possible to allow Heimdal autodetect and use the existing sqlite
system library as opposed to building its own copy?

Thanks


On Sat, Dec 05, 2009 at 07:04:00PM +0100, Guillem Jover wrote:
> Source: heimdal
> Source-Version: 1.3.1.dfsg.1-1
> Severity: important
> Tags: security
> 
> This version creates a new libheimsqlite0 package, which is linked
> against a local copy of sqlite (located in ‘lib/sqlite/’, the whole
> source code is packed into 3 files).
> 
> Embedding and linking against local code copies of system libraries is
> a problem for security and maintenanace reasons, please try to switch
> to use the one already packaged instead.
> 
> thanks,
> guillem
-- 
Brian May <[email protected]>


--- End Message ---

Reply via email to