cc'ing the secure testing team, as they're listed as maintaining the
list of embedded code copies https://wiki.debian.org/EmbeddedCodeCopies

A comparison of files in cdrkit-1.1.10:libhfs_iso/  and
hfsutils-3.2.6:libhfs/ suggest that they're derived from the same
source, albeit with a range of different modifications at this point.
if any of the common-ancestor code has problems, it will need to be
fixed in both places.

If it was possible to break out the code into a shared library, future
maintenance and security work would be improved.

block 570187 with 437226
thanks

There is currently an embedded code copy of libhfs (or some variant of
it, at any rate) in cdrkit  (and probably ultimately libhfs should be
used by the libburnia project if we want it to be able to make
HFS-compatible CDs).

I'd suggest that these are reasonable arguments for breaking out a
separate libhfs package, even if Martín's proposed application doesn't
materialize.

Regards,

Nice to meet you i am from Indonesia but husband is from Hanoi and we live
in the U.K , how are you?