On Wed, Nov 03, 2004 at 07:32:02PM +0100, Jeroen van Wolffelaar wrote: > One suggestion, this package is claimed to be only alpha by upsteam. It > also at the moment copies several C files from zlib and rsync, in stead > of linking to it as library. This poses a security support risk: this > package would need to get patched on rsync or zlib security updates too, > something that wouldn't be needed if you dynamically linked to it.
at least the zlib files are not really zlib, but modified, i think the same is true for the rsync files, but in generall i am perfectly you opinion that shared libs should generally be linked as such. > Rsync comes with a stand alone program to create some kind of index > files, isn't this also in some way usable for zsync? i didn't know that, what's it called? > Anyway, since the author says it's alpha, maybe it's a good idea to > upload to experimal only while it still matures -- the program didn't > exist at all yet a month ago. While it works, I don't think zsyncr has > already a place in a Debian stable release. definitely, this should not go into testing for a while... cu robert -- Robert Lemmen http://www.semistable.com
signature.asc
Description: Digital signature
