Hi Michael,
It has come to my attention that a lot of maintainers are simply adding a build-depends on libltdl3-dev to try to solve this problem. This is not a sufficient solution since your package will still use the embedded libtool code copy. You need to add '--without-included-ltdl' to your configure arguments to do this right.
this also didn't work. I had to replace AC_LIBLTDL_CONVENIENCE by LTDL_INIT to make the package use the system installed library instead of the supplied one.
On another note, if your package is affected in either stable or oldstable, it also must be fixed. The security team has determined that this issue is not sufficiently severe to warrant DSAs for the embedding packages, so instead, you should coordinate a proposed-update with the release team.
I'll do this. Thanks, Jochen -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
