> > > > clamav can be as stable as a rock but be completely useless... when > > two months after Sarge's release, a new virus hits hard, and in > > order to detect it, clamav needs libfoo, which is not in Debian. > > What then? *Maybe* we could push a new clamav via security.d.o, but > > what about libfoo? > You could take the rather horrible step of building a static copy of libfoo into clamav. This would be rather messy, but would allow a single binary to be updated.
-- John Lines <http://www.paladin.demon.co.uk/john.lines.html>