[This message has also been posted to gmane.linux.debian.devel.security.]
Charles Plessy <[EMAIL PROTECTED]> wrote:
> tree-puzzle in Debian is built against a local copy of the SPRNG
> library, and this is against best pactices and recommendations of the
> security team. However, tree-puzzle uses version 1 and Debian provides
> version 2. So close to the freeze, I do not know if it is wise to make a
> change now.
I've added it to our tracker, so that we can evaluate tree-puzzle if a security
issue should be found in sprng. Please drop us a line if you link tree-puzzle
dynamically after Lenny release.
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
