It's too late for a trip through New and Bookworm. We probably should have done it before, but not now. I think setting a minimum version of the current package will be sufficient and about all we can do now anyway.
Scott K On February 25, 2023 10:26:50 PM UTC, Sebastian Andrzej Siewior <sebast...@breakpoint.cc> wrote: >On 25 February 2023 16:20:45 UTC, Scott Kitterman <deb...@kitterman.com> wrote: >>True. >> >>I'm not a C programmer, so I may be unduly concerned about the maintenance >>load. I'll defer to your judgement. > >I'm going to throw this on my machine to get more testing - more than just the >test suite. >What about going through NEW with tfm? I would make it provide libtfm1-4k and >clamav would need a binnmu to pick up the change. > >> >>I do wonder if we should make a stab at switching the rust bits to using >>Debian packages instead of the embedded copies. If we could manage it, then >>any security issues in the rust libraries can be fixed in clamav with a >>binNMU, no upload needed. > >That sounds good. I need to educate myself about rust to figure out how that >works. Right now it is all magic. I just hope that they did not adapt any >packages to their needs and that they don't rely on a newer version of >something than what we have in the archive. >> >>Scott K > >