On Fri, 2009-05-01 at 15:58 +0200, Michelle Konzack wrote:
> Package: ampache
> Version: 3.4.1-2
> Severity: major
> 
> Hello Maintainer,
> 
> according  to   the   Website   <http://ampache.org/wiki/install:debian>
> ampache does NOT require the installation of MySQL but  on  my  embedded
> i386 System with a 512 MByte NAND  Flash  it  try  to  and  enforce  the
> installation of MySQL.  In summary 145 MByte!!!
> 
Thank you for bringing this to my attention.  Indeed mysql-server is in
the Recommends field of debian/control, I will demote mysql-server to
the Suggests field in Ampache-3.5 which is due to be released in the
coming weeks.

You should be able to use the "--no-install-recommends" option with
apt-get to prevent the installation of mysql-server.

> 
> I do not know a singel person which install on its own a MySQL server on
> a System connected directly to the Internet.

Having Ampache not install mysql-server was actually suggested by the DD
who sponsors this package.  IMHO mysql-server upgrades should be done by
a system admin and not by a maintainer script.
> 
> My current MySQL which I was forced to install for  an  OnlineShop  (now
> closed) has 18 grave/rc bugs and I was hacked over MySQL several times.

Hopefully these will be resolved soon.
> 
> My PostgresQL (from Debian Lenny and 8.3) is running since 1999 with  an
> open SSL port to the internet on a Dual-STM-4 (-> 2 x 622 MBit)  without
> being hacked, even if I have several 1000 hack attempts per day.
> 
> So, my feature request is to use PostgreSQL and of  course,  remote  SQL
> server.  On the website it was write, it is posibel, but it seems I have
> to recompile the whole bunch my own because potential security issues in
> the Debian version because MySQL.
> 
I would forward your request to the upstream developer, however it seems
that you have already contacted the upstream developer about this
feature request already.

http://ampache.org/bugs/ticket/446 

Best regards
Charlie

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to