On 06/03/13 14:54, Michael Tautschnig wrote: > Package: graphviz > Version: 2.26.3-12 > Usertags: goto-cc > > graphviz currently links against a shipped version of libtool that appears to > be > pre-2009, and at the very least is broken when using type-checking linkers. > This > was fixed in 2010: > > http://git.savannah.gnu.org/cgit/libtool.git/commit/libltdl/ltdl.c?id=03feff471901aeaac97b36964f88ed4d694dff99 > > Furthermore, libtool has even seen security fixes since that time. > > It may be worth updating the shipped libtool; preferably, however, the > packaged > version of libtool should be used instead by adding --with-included-ltdl to > the > configure command line. > > Best, > Michael >
Hi Michael, Yes, you are correct that upstream ships an ancient libtool version. However I do not believe you are correct when you say that we are linking against it. I can't claim to be any kind of great expert in autoconf, but as far as I can see the configure command line option --with-included-ltdl actually does the opposite of what you suggest - below is quoted from the libtool docs ... "--with-included-ltdl If there is no installed libltdl, or in any case if the person building your package would rather use the libltdl sources shipped with the package in the subdirectory named by LT_CONFIG_LTDL_DIR, they should pass this option to configure. If the --with-included-ltdl is not passed at configure time, and an installed libltdl is not found, then configure will exit immediately with an error that asks the user to either specify the location of an installed libltdl using the --with-ltdl-include and --with-ltdl-lib options, or to build with the libltdl sources shipped with the package by passing --with-included-ltdl." Cheers, David. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org