Bug#446405: ardour: Embeds too many libs
Hi Antony, It's a shame this hasn't been looked at yet. I hope ardour makes it into Lenny. Various people are working on this - the latest plan is to get a new release of libsndfile upstream, so that Ardour doesn't need to embed a copy. I have been doing a little research into this, and according to http://ardour.org/building, there is: SYSLIBS USE AT YOUR OWN RISK: CANCELS ALL SUPPORT FROM ARDOUR AUTHORS. Use existing system versions of various libraries instead of internal ones (yes|no) It's really not a good idea, because the system libraries don't yet have the patches that Ardour needs. That's why the upstream authors can't support a syslibs version. is it more important to have upstream support or Debian security support? We're aiming for both :-) Cheers! Daniel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#446405: ardour: Embeds too many libs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel James wrote: Hi Antony, It's a shame this hasn't been looked at yet. I hope ardour makes it into Lenny. Various people are working on this - the latest plan is to get a new release of libsndfile upstream, so that Ardour doesn't need to embed a copy. Okay, I missed the discussion on it - too many mailing lists to keep up with. libsndfile isn't the only library that is affected of course, there are several others, is the same activity taking place, to integrate patches with those? is it more important to have upstream support or Debian security support? We're aiming for both :-) Great! Antony -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIPqWWdt451jNP7ekRAn9/AJ4iDZZZQjQdbqxph82eDJ1zgQdoCgCdGO0W 86t2Igpu753l83WiBzdXFqs= =7VGU -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#446405: ardour: Embeds too many libs
Daniel James wrote: Hi Antony, libsndfile isn't the only library that is affected of course, there are several others Right. is the same activity taking place, to integrate patches with those? Hopefully we can tackle those one-by-one after libsndfile is sorted out. Indeed, please let me know if there is anything I can do to help. Antony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#446405: ardour: Embeds too many libs
On Thursday 29 May 2008 08:28:34 Daniel James wrote: It's really not a good idea, because the system libraries don't yet have the patches that Ardour needs. That's why the upstream authors can't support a syslibs version. AFAIK, sndfile was the only patched library. The others can be used (and SConstruct contains some comments about them). -- Felipe Sateler signature.asc Description: This is a digitally signed message part.
Bug#446405: ardour: Embeds too many libs
Package: ardour Severity: serious Quoting from #444518: That made me discover the following: | [EMAIL PROTECTED]:~/bsp2/ardour-2.1$ ls libs/ | appleutility ardour clearlooks fst glibmm2 gtkmm2 gtkmm2ext libgnomecanvasmm libsndfile midi++2 pbd sigc++2 +soundtouch surfaces Cc'ing the appropriate list according to [1] (although I didn't check which parts were actually built). Also, it seems e.g. libsndfile got CVE(s) this month. This needs to be fixed if these libs are all built and linked into the binary. If that is technically impossible we can exempt ardour from security support as outlined in #436161. Cheers, Moritz -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.22-2-686 (SMP w/1 CPU core) Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
