Re: [Sks-devel] SKS debian package

[Robert J. Hansen]

On 04/29/2012 05:42 PM, Jeffrey Johnson wrote:
> If there were any BDB "security releases", you might have a point.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1436

Yes, that's actually a bug in the libc db interface, not BDB itself, but
the point still stands: this is something that would be embedded into
sks with static linkage, and something that could be trivially fixed
out-of-band with dynamic linkage.

No nontrivial piece of software -- I repeat, *no* nontrivial piece of
software -- has *ever* been released without security bugs, and it is
both unprofessional and reckless to state otherwise.  If you don't
understand this, then I think we're done here because we're not going to
agree on anything.