On Sun, Jul 18, 2010 at 09:15:20PM +0200, Reinhard Tartler wrote:
> I don't think it is a practical problem to point than more than one diff
> in the announcement and/or changelog. Do you?
For the Debian Security Team is pointer to an upload commit is usually
sufficient. Adding one would be much
On Sun, Jul 18, 2010 at 20:37:59 (CEST), Rémi Denis-Courmont wrote:
> Le dimanche 18 juillet 2010 21:02:50 Reinhard Tartler, vous avez écrit :
>> On Sun, Jul 18, 2010 at 19:41:46 (CEST), Jean-Baptiste Kempf wrote:
>> > On Sun, Jul 18, 2010 at 06:14:26PM +0200, Reinhard Tartler wrote :
>> >> I thin
Le dimanche 18 juillet 2010 21:02:50 Reinhard Tartler, vous avez écrit :
> On Sun, Jul 18, 2010 at 19:41:46 (CEST), Jean-Baptiste Kempf wrote:
> > On Sun, Jul 18, 2010 at 06:14:26PM +0200, Reinhard Tartler wrote :
> >> I think the biggest problem we face here is communication. It is totally
> >> un
On Sun, Jul 18, 2010 at 20:09:33 (CEST), Jean-Baptiste Kempf wrote:
> On Sun, Jul 18, 2010 at 08:02:50PM +0200, Reinhard Tartler wrote :
>> It's not, and I've elaborated why in the paragraph you've killed in
>> your reply.
> What do you need? sha1s of the commits?
That sounds great. Even better i
On Sun, Jul 18, 2010 at 08:02:50PM +0200, Reinhard Tartler wrote :
> It's not, and I've elaborated why in the paragraph you've killed in
> your reply.
What do you need? sha1s of the commits?
> This has not changed, but AFAIUI, there are only very focused and
> documented changes in bugfix branches
On Sun, Jul 18, 2010 at 19:41:46 (CEST), Jean-Baptiste Kempf wrote:
> On Sun, Jul 18, 2010 at 06:14:26PM +0200, Reinhard Tartler wrote :
>> I think the biggest problem we face here is communication. It is totally
>> unreasonable to expect everyone to read and follow vlc. Can you please
>> either b
On Sun, Jul 18, 2010 at 06:14:26PM +0200, Reinhard Tartler wrote :
> I think the biggest problem we face here is communication. It is totally
> unreasonable to expect everyone to read and follow vlc. Can you please
> either be more explicit with your VSAs or perhaps create a more
> specialized mail
On Sun, Jul 18, 2010 at 17:23:48 (CEST), Rémi Denis-Courmont wrote:
>> And I'm asking you *again*: What can we do so that the situation
>> improves? Are you evading my question? We know that we suck in this
>> regard, emphasizing this part from your side is probably not going to
>> improve the sit
Hello,
Le dimanche 18 juillet 2010 17:56:16 Reinhard Tartler, vous avez écrit :
> vlc-devel is a really high volume mailing list,
It's not so bad since commit logs were secluded to a list of their own.
Besides, we tend to tag relevant topics with '[PACKAGERS]'. At least the
OpenSUSE mai
On Sun, Jul 18, 2010 at 13:25:30 (CEST), Rémi Denis-Courmont wrote:
> Le dimanche 18 juillet 2010 12:00:47 Reinhard Tartler, vous avez écrit :
>> >> So this piece of information is pretty useless for identifying
>> >> missing changes in 0.8.x.
>> >
>> > That's not my problem (anymore). We have ma
Le dimanche 18 juillet 2010 12:00:47 Reinhard Tartler, vous avez écrit :
> >> So this piece of information is pretty useless for identifying
> >> missing changes in 0.8.x.
> >
> > That's not my problem (anymore). We have made about twenty releases, from
> > four different branches since Debian Sta
On Fri, Jul 16, 2010 at 10:55:02 (CEST), Rémi Denis-Courmont wrote:
> On Tue, 13 Jul 2010 10:14:52 -0400, Reinhard Tartler
> wrote:
>> On Tue, Jul 13, 2010 at 10:01:13 (EDT), Rémi Denis-Courmont wrote:
>>
Ping maintainers and debian security team. Indicate the security
issue, the patch
On Tue, Jul 13, 2010 at 15:26:53 (EDT), Christophe Mutricy wrote:
>> % apt-cache rdepends libvlc2
>> libvlc2
>> Reverse Depends:
>> vlc-nox
>> mozilla-plugin-vlc
>> libvlc-dev
>> % apt-cache showsrc vlc-nox libvlc-dev mozilla-plugin-vlc| \
>> grep Package: | uniq
>> Package: vlc
>>
>>
On Tue, 13 Jul 2010 10:14:52 -0400, Reinhard Tartler
wrote:
> On Tue, Jul 13, 2010 at 10:01:13 (EDT), Rémi Denis-Courmont wrote:
>
>>> Ping maintainers and debian security team. Indicate the security
>>> issue, the patch and or new tarball.
>>
>> It's not like it's not known:
>> http://security-
On Tue, Jul 13, 2010 at 10:13:22 (EDT), Rémi Denis-Courmont wrote:
> On Tue, 13 Jul 2010 08:40:09 -0400, Reinhard Tartler
> wrote:
>> So let's check:
>>
>> | vlc | 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.3 |
>> hardy-updates/universe | source
>> | vlc | 0.9.9a-2ubuntu1 | jaunty/multiv
On Tue, Jul 13, 2010 at 10:01:13 (EDT), Rémi Denis-Courmont wrote:
>> Ping maintainers and debian security team. Indicate the security
>> issue, the patch and or new tarball.
>
> It's not like it's not known:
> http://security-tracker.debian.org/tracker/status/release/stable
it lists 4 CVEs: CVE-
> % apt-cache rdepends libvlc2
> libvlc2
> Reverse Depends:
> vlc-nox
> mozilla-plugin-vlc
> libvlc-dev
> % apt-cache showsrc vlc-nox libvlc-dev mozilla-plugin-vlc| \
> grep Package: | uniq
> Package: vlc
>
>
> So the ABI issue is a non-issue, since nobody uses libvlc outside of vlc
> i
On 13/07/10 08:40, Reinhard Tartler wrote:
> On Tue, Jul 13, 2010 at 02:49:15 (EDT), Rémi Denis-Courmont wrote:
>
>>Hello,
>>
>> On Mon, 12 Jul 2010 22:28:59 +0200, Benjamin Drung
>> wrote:
>>> I doubt that we can pull a new upstream version into a stable Ubuntu
>>> release (e.g. vlc 1.1.0 in
On Tue, 13 Jul 2010 08:40:09 -0400, Reinhard Tartler
wrote:
> So let's check:
>
> | vlc | 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.3 |
> hardy-updates/universe | source
> | vlc | 0.9.9a-2ubuntu1 | jaunty/multiverse | source, amd64, i386
> | vlc | 1.0.2-1ubuntu2 | karmic/universe | sour
On Mon, 12 Jul 2010 23:22:11 +0100, Dmitrijs Ledkovs
wrote:
> 2010/7/12 Rémi Denis-Courmont :
>> Hello,
>>
>> I think it is fair to say that there is increasing frustration from
>> users and developers w.r.t. the state of VLC in Debian & Ubuntu. I am
>> left wondering what is the best way
[sorry for the resent, it seems the CC line was wrong in the previous mail]
On Mon, Jul 12, 2010 at 14:54:53 (EDT), Rémi Denis-Courmont wrote:
> Hello,
>
> I think it is fair to say that there is increasing frustration from users and
> developers w.r.t. the state of VLC in Debian & Ubuntu.
On Tue, Jul 13, 2010 at 02:49:15 (EDT), Rémi Denis-Courmont wrote:
>Hello,
>
> On Mon, 12 Jul 2010 22:28:59 +0200, Benjamin Drung
> wrote:
>> I doubt that we can pull a new upstream version into a stable Ubuntu
>> release (e.g. vlc 1.1.0 in Ubuntu 10.04), because the new version breaks
>> the
Hello,
On Mon, 12 Jul 2010 22:28:59 +0200, Benjamin Drung
wrote:
> I doubt that we can pull a new upstream version into a stable Ubuntu
> release (e.g. vlc 1.1.0 in Ubuntu 10.04), because the new version breaks
> the ABI of the older version and therefore break applications that uses
> libvlc
Hello,
I think it is fair to say that there is increasing frustration from users and
developers w.r.t. the state of VLC in Debian & Ubuntu. I am left wondering
what is the best way forward...
1) Debian stable
Some time ago, one of the Debian Security (testing or stable, I honestly don'
24 matches
Mail list logo
