On Fri, Jun 1, 2012 at 9:13 AM, Laszlo Boszormenyi (GCS) <[email protected]> wrote:
> Hi,
>
> On Fri, 2012-06-01 at 03:38 +0900, Kouhei Maeda wrote:
>> I build CouchDB 1.2.0
>> If László-san wouldn't upload it, I want to upload it as NMU.
>  I've packaged it a while. But realized that it contains other projects
> under src/ . Including Snappy and YAJL both are already packaged in
> Debian. This means code duplication in CouchDB and the risk that a
> CVE would remain unfixed in them, as they are hidden from the security
> team. I've already asked upstream about this, but can't recall if I get
> an answer. :( I would like to build CouchDB with the packaged libraries.
> Can't find out how I may achieve this.

I meant to get to this a while ago, but got busy. (surprise!)

I'd be happy to help with that. It should be as simple as deleting the
included versions in a patch. In the case of json2 (also packaged, I
think) there is a place where a string substitution may be necessary
to point the install to the right path.... that's just from memory.



--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to