On Tue, 04 Oct 2005, Mark Johnson wrote: > Matthias Klose wrote: > >Package: docbook-xsl > >Version: 1.68.1 > >Severity: serious > > > >The extensions contains many jar files, without having the sources in > >the source package, the problematic files seem to be: > > > > saxon644.jar > > saxon65.jar > > saxon651.jar > > saxon652.jar > > saxon653.jar > > I don't change what comes in the upstream source package.
That's fine, but the proper approach here is to either build these files from the source code if that's available, or remove them entirely and rebuild the orig.tar.gz as 1.68.1.dfsg.orig.tar.gz or similar. > >It looks like the source for saxon643.jar and xalan25.jar is provided, > >but they are not built during the build process. > > If docbook-xsl is now going to require a rebuild of the (supposedly) > portable jars, then we need to rethink how to package this stuff. Considering the fact that you can't currently fix any bugs in those jars, yes, that's pretty much what it means. Regardless, for this bug there are three alternatives: 1: Ship the source code for the jars (and build the jars from it) 2: Strip out the jars and distribute as a .dfsg package 3: Remove docbox-xsl from the archive. Please enact one of them so this bug can be resolved. Don Armstrong -- I never until now realized that the primary job of any emoticon is to say "excuse me, that didn't make any sense." ;-P -- Cory Doctorow http://www.donarmstrong.com http://rzlab.ucr.edu
signature.asc
Description: Digital signature