On Tue, Feb 25, 2014 at 05:57:02PM +0100, Moritz Mühlenhoff wrote: > On Sun, Feb 23, 2014 at 11:36:36PM +0100, Andreas Cadhalpun wrote: > > Hi Moritz, > > > > On 23.02.2014 22:56, Moritz Mühlenhoff wrote: > > >I don't have the time nor the interest to discuss this at length, so > > >EOD from my side. > > > > since you started this discussion by effectively preventing FFmpeg > > from being uploaded, I take it that you ending this discussion now > > means FFmpeg can be uploaded and you prefer to "be working with the > > release team to sort this out for jessie", after FFmpeg has reached > > testing. > > No, it means I don't have the time, nor nerve to discuss this. We're > after all busy to keep Debian secure and sick of maintainers who only > focus on their pet package and neglegt the overall maintainability > of the Debian archive. > > The security team made it abundantly clear that we will only support > either solution. If you go ahead with the ITP we'll file an RC bug > against ffmpeg to prevent it's transition to testing. You can then > sort out how/whether ffmpeg should _replace_ libav, but both are not > an option. Id like to volunteer to help with any future security issues in FFmpeg packages in debian. [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB DNS cache poisoning attacks, popular search engine, Google internet authority dont be evil, please
Attachment:
signature.asc
Description: Digital signature