Dear all, as maintainer of the Seafile client packages (libsearpc, seafile and seafile-client), I would like to thank Jan-Henrik for bringing this to our attention. There have already been such findings in the past, regarding some code taken from git, and the discussion regarding libzdb in the past, as you mentioned. I remember discussing the problems regarding linking to OpenSSL, too. However, all of the database related code is *only* contained in the Seafile server implementation (https://github.com/haiwen/seafile-server, RFP at #865830) and not in the Seafile client implementation (https://github.com/haiwen/seafile) that I have packaged for Debian. I disagree that this should serve as a reason for *not* including the client packages in the next Debian release. What do others think about that? I will however forward these findings to the developers at Seafile Ltd and ask them for a proper resolution. Best regards, -- Moritz Schlarb
begin:vcard fn:Moritz Schlarb n:Schlarb;Moritz org;quoted-printable;quoted-printable:Johannes Gutenberg-Universit=C3=A4t Mainz;Zentrum f=C3=BCr Datenverarbeitung adr;dom:;;;Mainz email;internet:schlarbm@uni-mainz.de tel;work:+49 6131 39 29441 note;quoted-printable:OpenPGP Fingerprint: DF01 2247 BFC6=0D=0A= 5501 AFF2 8445 0C24 B841 C7DD BAAF version:2.1 end:vcard
Attachment:
signature.asc
Description: OpenPGP digital signature