Hi pabs, > > >Also, src/bin/lz4 looks like an embedded code copy. Please ensure that > >the package uses the system version of the lz4 library and that > >src/bin/lz4 is removed in debian/rules build before ./configure is > >run, so that the code copy is never used. For bonus points, convince > >upstream to remove this directory from their VCS and tarballs. Please > >note that lz4 recently had some security issues, so terminology might > >be affected by them, depending on on how it uses lz4. >
if i need to remove src/bin/lz4 folder with debian/rules does that imply that i need to use get-orig-source to repack, and also do i then need to use d/copyright to exclude-files? also if the package requires / builds lz4 do i need to modify the makefile that builds it and do i provide the lz4-dev as a build-depends or . . . just the libs a 'depends' i'll look into packaging the geneet package too, assuming that will be needed. Thanks Anthony (bofh80)
