On Wed, Jan 04, 2006 at 10:30:47AM +0100, Gerrit Pape wrote:
> On Tue, Jan 03, 2006 at 10:12:10PM -0800, Steve Langasek wrote:
> > On Tue, Jan 03, 2006 at 06:24:09PM -0500, Nathanael Nerode wrote:
> > > I don't know how much we care about that...
> > > cvm
> > > mailfront
> > > are in testing but Build-Depend on freecdb which isn't.
> > Well, that's a release-critical bug, just of a class we don't spend much
> > time chasing until close to release.
> Unfortunately the discussion about the freecdb package didn't attract
> my attention earlier, the release critical bug is resolved as invalid
> now.
And reopened. You have *not* addressed the issues contributing to this RC
bug:
- freecdb provides no shared library or static _pic library suitable for
linking into other shared libraries, which is something we generally
expect from library packages
- the only thing that sucks more than static-only libs for security support
of a library is *bundled* static-only libs
- the author (and current maintainer) of freecdb says that this cdb
implementation should be considered dead
1) and 2) suck, but it's 3) that makes this a serious bug AFAICT; you can
address 3) by becoming the new maintainer, of course, but in that case I
would expect that you would actually, er, *maintain* it, for instance by
providing a _pic.a library instead of dismissing the bug as a "problem in
vpopmail's packaging".
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
<email address hidden> http://www.debian.org/
reopen 345868
thanks
On Wed, Jan 04, 2006 at 10:30:47AM +0100, Gerrit Pape wrote:
> On Tue, Jan 03, 2006 at 10:12:10PM -0800, Steve Langasek wrote:
> > On Tue, Jan 03, 2006 at 06:24:09PM -0500, Nathanael Nerode wrote:
> > > I don't know how much we care about that...
> > > cvm
> > > mailfront
> > > are in testing but Build-Depend on freecdb which isn't.
> > Well, that's a release-critical bug, just of a class we don't spend much
> > time chasing until close to release.
> Unfortunately the discussion about the freecdb package didn't attract
> my attention earlier, the release critical bug is resolved as invalid
> now.
And reopened. You have *not* addressed the issues contributing to this RC
bug:
- freecdb provides no shared library or static _pic library suitable for
linking into other shared libraries, which is something we generally
expect from library packages
- the only thing that sucks more than static-only libs for security support
of a library is *bundled* static-only libs
- the author (and current maintainer) of freecdb says that this cdb
implementation should be considered dead
1) and 2) suck, but it's 3) that makes this a serious bug AFAICT; you can
address 3) by becoming the new maintainer, of course, but in that case I
would expect that you would actually, er, *maintain* it, for instance by
providing a _pic.a library instead of dismissing the bug as a "problem in
vpopmail's packaging".
-- www.debian. org/
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
<email address hidden> http://