[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#446405: marked as done (ardour: Embeds too many libs)

Your message dated Wed, 17 Dec 2008 22:32:16 +0000
with message-id <E1LD4wC-0004kF-Ec@ries.debian.org>
and subject line Bug#446405: fixed in ardour 1:2.7.1-1
has caused the Debian Bug report #446405,
regarding ardour: Embeds too many libs
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
446405: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446405
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: ardour
Severity: serious

Quoting from #444518:
> That made me discover the following:
> 
> | kibi@kitty2:~/bsp2/ardour-2.1$ ls libs/
> | appleutility  ardour  clearlooks  fst  glibmm2  gtkmm2  gtkmm2ext libgnomecanvasmm  libsndfile  midi++2  pbd  sigc++2
> +soundtouch surfaces
> 
> Cc'ing the appropriate list according to [1] (although I didn't check
> which parts were actually built). Also, it seems e.g. libsndfile got
> CVE(s) this month.

This needs to be fixed if these libs are all built and linked into the binary.
If that is technically impossible we can exempt ardour from security support
as outlined in #436161.

Cheers,
        Moritz

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-2-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

--- End Message ---
--- Begin Message --- 
Source: ardour
Source-Version: 1:2.7.1-1

We believe that the bug you reported is fixed in the latest version of
ardour, which is due to be installed in the Debian FTP archive:

ardour_2.7.1-1.diff.gz
  to pool/main/a/ardour/ardour_2.7.1-1.diff.gz
ardour_2.7.1-1.dsc
  to pool/main/a/ardour/ardour_2.7.1-1.dsc
ardour_2.7.1-1_amd64.deb
  to pool/main/a/ardour/ardour_2.7.1-1_amd64.deb
ardour_2.7.1.orig.tar.gz
  to pool/main/a/ardour/ardour_2.7.1.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 446405@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Free Ekanayaka <freee@debian.org> (supplier of updated ardour package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 17 Dec 2008 14:25:50 +0000
Source: ardour
Binary: ardour ardour-altivec ardour-i686
Architecture: source amd64
Version: 1:2.7.1-1
Distribution: unstable
Urgency: low
Maintainer: Debian Multimedia Team <debian-multimedia@lists.debian.org>
Changed-By: Free Ekanayaka <freee@debian.org>
Description: 
 ardour     - digital audio workstation (graphical gtk2 interface)
 ardour-altivec - digital audio workstation (graphical gtk2 interface) [altivec]
 ardour-i686 - digital audio workstation (graphical gtk2 interface) [i686]
Closes: 446405 508970
Changes: 
 ardour (1:2.7.1-1) unstable; urgency=low
 .
   * New upstream release (Closes: #508970)
   * Remove DOCUMENTATION from binary packages, drop by upstream
   * Set SYSLIBS=yes to build against system libraries instead of
     internal ones (Closes: #446405)
   * Drop CVE-2007-4974 patch, merged upstream
   * Update 90_ardour-x-change patch
   * Update 80_ardourino patch
   * Drop 70_DARCH patch, merged upstream
   * Build with optimisation on amd64
Checksums-Sha1: 
 19369f1211cb8b3bf6f3b462429f5a17db139889 1809 ardour_2.7.1-1.dsc
 8b18d2a8a057ff76563ff4e6e0ce6fa654753ad0 4179205 ardour_2.7.1.orig.tar.gz
 155c43ca230cc0b382d58a33efce87f7b64ad462 49151 ardour_2.7.1-1.diff.gz
 3e744e36a4b7bf2fc424bff3ea885c31d990c2e1 5825754 ardour_2.7.1-1_amd64.deb
Checksums-Sha256: 
 8af4408e4443cc7c764d25fdd03db8afbb6756391e84988432f76f290c420063 1809 ardour_2.7.1-1.dsc
 bee03b4ce08af06149c1c2bf547c9887c6d10a5d08154bbc2bb7a550845868b7 4179205 ardour_2.7.1.orig.tar.gz
 8236d64c251e133db1d62ee94b22eb925f799ad4916bf138cefb4bbebbff5926 49151 ardour_2.7.1-1.diff.gz
 1f23e0e9c9d855b7538a6709789f68d1cf582196560a3ef82f1fd14bf5dd93d9 5825754 ardour_2.7.1-1_amd64.deb
Files: 
 0511db9737b5361715901fe47e386b09 1809 sound optional ardour_2.7.1-1.dsc
 181b55b3b4b72bc771cefc58924fdf19 4179205 sound optional ardour_2.7.1.orig.tar.gz
 6ec24b9fd38aa2b1041aca0b86562c8b 49151 sound optional ardour_2.7.1-1.diff.gz
 b8ee49d9c1341e5791cde4ecd192b177 5825754 sound optional ardour_2.7.1-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklJc/0ACgkQcanJGlcVnll/ZwCfSrYFT+Qb6B/WNiwWhsur0tqC
3+IAn2K/KV+rKJhmSaMXAmAaC/b19Yfj
=5Uhn
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: