Hi, As Mathieu says:
> > As said previously, I believe #506992 is starting to block other > > packages, so it would be nice to make some progress on this. Indeed. So I propose to simply add overrides for both embedded libraries. These libraries have not been a problem for the last 11 years that VTK has been in the archive. Let's get #506992 out of the way first, then tackle the embedded libraries. Denis' analysis: > [...] According to logs, they patched ftgl > when they included it (June 2002), sent most of their patches > upstream, and these patches appeared in FTGL 1.4 (August 2002). > But VTK developers never managed to update their copy. And yes, there > are VTK patches which have not been merged into FTGL. certainly suggests to me that it would be prudent to coordinate FTGL changes with upstream. I haven't seen a similar analysis for sqlite, but I don't think it would hurt to at least contact upstream about their thoughts. > > Denis, did you made any progress on ftgl patch ? Do you have any > > comment on Steve's points ? > > Honestly I am not willing to follow Steve's plan. I can still help > replacing vtkftgl by pristine FTGL and fixing bugs when they are > reported, if this is considered useful, FWIW, that doesn't strike me as useful; I think it does a disservice to our users. We can and should be proactive in estimating the risk prior to proceeding with a change. Regards, -Steve
signature.asc
Description: Digital signature
