Ugh, hit "Send" too soon.
I found some packages which embed copies of the Porter stemmer library
(PostgreSQL, tracker, pl, etc.). Should I file bugs once I have the
full list, or should I apply for a bundling exception?
I don't know if the existing copies are patched in significant ways.
--
Florian Weimer / Red Hat Product Security Team