[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Build-depends on package not in testing

reopen 345868

On Wed, Jan 04, 2006 at 10:30:47AM +0100, Gerrit Pape wrote:
> On Tue, Jan 03, 2006 at 10:12:10PM -0800, Steve Langasek wrote:
> > On Tue, Jan 03, 2006 at 06:24:09PM -0500, Nathanael Nerode wrote:
> > > I don't know how much we care about that...

> > > cvm
> > > mailfront

> > > are in testing but Build-Depend on freecdb which isn't.

> > Well, that's a release-critical bug, just of a class we don't spend much
> > time chasing until close to release.

> Unfortunately the discussion about the freecdb package didn't attract
> my attention earlier, the release critical bug is resolved as invalid
> now.

And reopened.  You have *not* addressed the issues contributing to this RC

- freecdb provides no shared library or static _pic library suitable for
  linking into other shared libraries, which is something we generally
  expect from library packages
- the only thing that sucks more than static-only libs for security support
  of a library is *bundled* static-only libs
- the author (and current maintainer) of freecdb says that this cdb
  implementation should be considered dead

1) and 2) suck, but it's 3) that makes this a serious bug AFAICT; you can
address 3) by becoming the new maintainer, of course, but in that case I
would expect that you would actually, er, *maintain* it, for instance by
providing a _pic.a library instead of dismissing the bug as a "problem in
vpopmail's packaging".

Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon@debian.org                                   http://www.debian.org/

Attachment: signature.asc
Description: Digital signature

Reply to: