* Andreas Cadhalpun (andreas.cadhal...@googlemail.com) [140928 11:27]: > On 28.09.2014 10:24, Moritz Muehlenhoff wrote: >> Package: ffmpeg >> Severity: serious >> >> As written before we can have only libav or ffmpeg in jessie. >> I'm filing this blocker bug to prevent testing migration until >> this is sorted out. > > As I have explained [1], I see no security problem with having FFmpeg > and Libav in Jessie, in particular because this is already the case for > Wheezy, as chromium embeds a copy of FFmpeg.
First of all, I think it is very good news that we now have FFmpeg available in Debian. Thank you for your work on it, it's appreciated. However, the open question is (especially with the upcoming release), do we want to have it in jessie? (That we probably want FFmpeg in testing in the long run is something else, but the current discussion is especially about jessie.) I also think it's good that you actively raised this discussion, even if it is perhaps not working as you would have like it. Please continue this good style. Another remark, we are already quite late in the cycle. At this point it is too late to have greater changes to jessie. So even if jessie is not officially frozen, larger changes are not possible anymore (without disturbing the time plan). > So would you please explain why you see a problem? I hope we end this discussion on an agreement about the jessie plans. However, to avoid misunderstandings at a later moment, I need to point out that the final decision of what is part of jessie is taken by the release team (or ultimatly the release managers). All of RC-bugs, testing migration scripts etc are very valuable helpers because it wouldn't be possible to manage it otherwise, but in the end they are helpers. The release policy does say "Packages must be security-supportable". I would be surprised if a statement from the security team (assuming that Moritz raised that bug report with his security team-hat on and not privately) that they would like to have only one of libav and ffmpeg in jessie would be overruled by the release team. Now seeing the statements from the libav maintainers (which of course, as this is an overlaping jurisdiction, could be escalated to the tech ctte), that we already have transition freeze and the time planings for jessie, makes it quite unlikely (or rather: impossible) to switch from libav to FFmpeg in time for jessie. (Of course, for jessie+1 there is enough time for the transition. And for jessie+1 we will have enough experience with FFmpeg in Debian to perhaps see things in a different light.) So from my experience I assume the final answer would look similar to "It's too late for jessie, sorry". Which might be a pity but, well, that's how it is. Andi -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
