On 14/02/2023 00:01, Thorsten Alteholz wrote:
Oh, I have to admit I have no clue what this means :-).
But in case leptonica is related to leptonlib, keeping the convenience
copy is a very bad thing as leptonlib is affected by lots of CVEs.
The same seems to happen with tesseract ...
And please don't shoot the messanger, this sound like something that has
to wait until after the release.
I do not actually know what leptonlib is and that it existed. I am
already using the convenience copy of leptonica in Ghostscript for a
longer time as the system's leptonica is not in Main. There were no
complaints and especially no CVEs about that, and so I simply relied on
Ghostscript's upstream developers in terms of upstream maintenance and
security here.
According to doc/HowToBuildTheDocs.txt:
"This documentation relies on Sphinx to publish HTML & PDF docs from
markdown files written with restructured text / RST"
At least debian/rules uses sphinx-build ...
I only had a look into the debian/ directory and did not see the
doc/HowToBuildTheDocs.txt file.
Thank you very much.
Till
