[Pkg-openmpi-maintainers] Question regarding apparent dependency on libibverbs

[Manuel Prinz]

Am Dienstag, den 31.03.2009, 20:43 +0200 schrieb Mikael Djurfeldt:
> I'm a maintainer which joined Debian very long time
> ago and now, again, try to package a software.  So, it is very
> valuable for me to learn that I should contact the security team
> regarding the static part.

Before you take action, please note that this only applies if you build
against the static libs. It is no problem to just ship them. For
example, Open MPI builds both static and shared libs but the executable
of Open MPI only link to the shared libraries. This is safe. I'm quite
sure that you can do the same with music. If you need assistance, I'd be
glad to help you!

Best regards
Manuel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://lists.alioth.debian.org/pipermail/pkg-openmpi-maintainers/attachments/20090331/77b9cb66/attachment.pgp