[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1039116: ardour: Please repack without third party library



Source: ardour
Version: Please repack without third party library
Severity: important

Dear Maintainer,

I was checking if your are affected by a lua security bug. It will be nice if
you could strip (repack with +ds suffix) third party library.

It is a good pratice to not ship third party library when you use system
library:
- in case of security bug it is less work (no need to check build log)
- do not introduce accidental compilation of third party library in case of
upstream modification.

Rouca


-- System Information:
Debian Release: trixie/sid
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armel

Kernel: Linux 6.1.0-9-rt-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled


Reply to: