Bug#774800: libav: take measurements not to include or automatically download binary blobs

2015-01-07 Thread Christoph Anton Mitterer
On Wed, 2015-01-07 at 20:17 +0100, Sebastian Ramacher wrote: Do you understand the change you've linked to? As I've said, I've only had a first glance i.e. looking at the commit log, which mentioned that the downloading must take place, but didn't clearly say whether this is automated or not.

Bug#774800: libav: take measurements not to include or automatically download binary blobs

2015-01-07 Thread Christoph Anton Mitterer
Source: libav Severity: wishlist Tags: security Hi. Apparently upstream has choosen the same stupid way, that Mozilla (see e.g. #769716) did before to include OpenH264. AFAICS on a first glance, this is done via downloading the blob distributed by Cisco, for which no one knows what it really

Bug#774800: libav: take measurements not to include or automatically download binary blobs

2015-01-07 Thread Christoph Anton Mitterer
On Wed, 2015-01-07 at 20:07 +0100, Sebastian Ramacher wrote: So, no bug here. There's not even an alpha release of libav 12 available yet. Well... first, it was severity=wishlist, thus not necessarily a bug... and 2nd, these changes will likely hit a release or may be introduced via some

Bug#774800: libav: take measurements not to include or automatically download binary blobs

2015-01-07 Thread Sebastian Ramacher
On 2015-01-07 20:12:30, Christoph Anton Mitterer wrote: On Wed, 2015-01-07 at 20:07 +0100, Sebastian Ramacher wrote: So, no bug here. There's not even an alpha release of libav 12 available yet. Well... first, it was severity=wishlist, thus not necessarily a bug... and 2nd, these changes