Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Andreas Cadhalpun]

On 22.11.2016 20:35, Andreas Cadhalpun wrote:
> That's fine. I'll also wait with fixing ffmpeg for the next upstream
> bugfix release that is expected soon.
> 
> I've now filed bugs #845361 - #845366 about the other packages.

This is now all done and the fixes migrated to testing.

Thus I've requested the removal of schroedinger (see #848828).

Best regards,
Andreas

Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Andreas Cadhalpun]

On 22.11.2016 10:55, Sebastian Dröge wrote:
> On Mon, 2016-11-21 at 23:46 +0100, Andreas Cadhalpun wrote:
>> I will take care of ffmpeg myself and I assume you will take care of
>> gst-plugins-bad1.0.
> 
> Yeah, will do in the next days! Some other things to handle first

That's fine. I'll also wait with fixing ffmpeg for the next upstream
bugfix release that is expected soon.

I've now filed bugs #845361 - #845366 about the other packages.
(vlc got already fixed before I had the chance to file a bug.)

Best regards,
Andreas

Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Sebastian Dröge]

On Mon, 2016-11-21 at 23:46 +0100, Andreas Cadhalpun wrote:
> Hi Sebastian,
> 
> On 21.11.2016 08:22, Sebastian Dröge wrote:
> > On Sun, 2016-11-20 at 11:57 +0100, Moritz Muehlenhoff wrote:
> > 
> > > > Thus I think stretch would be better of without this library.
> > > > 
> > > > As replacement, ffmpeg has a decent dirac decoder and also a
> > > > vc2 encoder, which is the intra-only subset of dirac that
> > > > got standardized by the SMPTE.
> > > 
> > > Andreas, thanks for filing this bug. Fully agreed from my side.
> > 
> > I tend to agree here.
> 
> OK, then it's agreed to remove libschroedinger.
> 
> > Note however that VC2 is only a subset of Dirac,
> > so we'll definitely lose some (probably unimportant) functionality
> > here.
> 
> That's true, but I also think that the functionality going to be lost
> is rather unimportant.

Ack

> Yes. The ocaml bindings have a very low popcon (14), so I think it's
> OK to just remove them together with libschroedinger.
> 
> I will take care of ffmpeg myself and I assume you will take care of
> gst-plugins-bad1.0.

Yeah, will do in the next days! Some other things to handle first

signature.asc
Description: This is a digitally signed message part

Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Andreas Cadhalpun]

Hi Sebastian,

On 21.11.2016 08:22, Sebastian Dröge wrote:
> On Sun, 2016-11-20 at 11:57 +0100, Moritz Muehlenhoff wrote:
> 
>>> Thus I think stretch would be better of without this library.
>>>
>>> As replacement, ffmpeg has a decent dirac decoder and also a
>>> vc2 encoder, which is the intra-only subset of dirac that
>>> got standardized by the SMPTE.
>>
>> Andreas, thanks for filing this bug. Fully agreed from my side.
> 
> I tend to agree here.

OK, then it's agreed to remove libschroedinger.

> Note however that VC2 is only a subset of Dirac,
> so we'll definitely lose some (probably unimportant) functionality
> here.

That's true, but I also think that the functionality going to be lost
is rather unimportant.

> Current reverse dependencies are
>  ffmpeg
>  gmerlin-avdecoder
>  gst-plugins-bad1.0
>  libquicktime
>  liquidsoap
>  lives
>  ocaml-schroedinger
>  vlc

There is also mplayer, which has a build-dependency on libschroedinger-dev,
however no run-time dependency due to:
Checking for libschroedinger ... no (ffmpeg (static) is required by 
libschroedinger, sorry)

> Except for the ocaml bindings, this should all be a matter of simply
> disabling the functionality.

Yes. The ocaml bindings have a very low popcon (14), so I think it's
OK to just remove them together with libschroedinger.

I will take care of ffmpeg myself and I assume you will take care of
gst-plugins-bad1.0.
I intend to file bugs for the other packages and block this bug by
them.

Best regards,
Andreas

Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Sebastian Dröge]

On Sun, 2016-11-20 at 11:57 +0100, Moritz Muehlenhoff wrote:

> > Thus I think stretch would be better of without this library.
> > 
> > As replacement, ffmpeg has a decent dirac decoder and also a
> > vc2 encoder, which is the intra-only subset of dirac that
> > got standardized by the SMPTE.
> 
> Andreas, thanks for filing this bug. Fully agreed from my side.

I tend to agree here. Note however that VC2 is only a subset of Dirac,
so we'll definitely lose some (probably unimportant) functionality
here.

Current reverse dependencies are
 ffmpeg
 gmerlin-avdecoder
 gst-plugins-bad1.0
 libquicktime
 liquidsoap
 lives
 ocaml-schroedinger
 vlc

Except for the ocaml bindings, this should all be a matter of simply
disabling the functionality.

signature.asc
Description: This is a digitally signed message part

Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Moritz Muehlenhoff]

On Sat, Nov 19, 2016 at 07:17:12PM +0100, Andreas Cadhalpun wrote:
> Package: libschroedinger-1.0-0
> Version: 1.0.11-2.1
> Severity: serious
> X-Debbugs-Cc: Debian Security Team 
> 
> Dear Maintainer,
> 
> libschroedinger contains various possibly security relevant bugs
> (see #787957 for the tip of the iceberg).
> 
> Furthermore it is no longer maintained upstream:
>  * last release from 2012
>  * homepage vanished
> 
> Thus I think stretch would be better of without this library.
> 
> As replacement, ffmpeg has a decent dirac decoder and also a
> vc2 encoder, which is the intra-only subset of dirac that
> got standardized by the SMPTE.

Andreas, thanks for filing this bug. Fully agreed from my side.

Cheers,
Moritz

Bug#845037: libschroedinger-1.0-0: is this package fit for stretch?

[Andreas Cadhalpun]

Package: libschroedinger-1.0-0
Version: 1.0.11-2.1
Severity: serious
X-Debbugs-Cc: Debian Security Team 

Dear Maintainer,

libschroedinger contains various possibly security relevant bugs
(see #787957 for the tip of the iceberg).

Furthermore it is no longer maintained upstream:
 * last release from 2012
 * homepage vanished

Thus I think stretch would be better of without this library.

As replacement, ffmpeg has a decent dirac decoder and also a
vc2 encoder, which is the intra-only subset of dirac that
got standardized by the SMPTE.

Best regards,
Andreas


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages libschroedinger-1.0-0 depends on:
ii  libc6  2.24-5
ii  libgcc11:6.2.0-13
ii  liborc-0.4-0   1:0.4.26-2
ii  libstdc++6 6.2.0-13
ii  multiarch-support  2.24-5

libschroedinger-1.0-0 recommends no packages.

libschroedinger-1.0-0 suggests no packages.

-- no debconf information