1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] ffmpeg in mageia1 updates testing (revision 171164)
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20ffmpeg%20in%20mageia1%20updates%20testing%20%28revision%20171164%29&In-Reply-To=%3C4ED10030.8090707%40mageia.org%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="009850.html">
<LINK REL="Next" HREF="009792.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] ffmpeg in mageia1 updates testing (revision 171164)</H1>
<B>Anssi Hannula</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20ffmpeg%20in%20mageia1%20updates%20testing%20%28revision%20171164%29&In-Reply-To=%3C4ED10030.8090707%40mageia.org%3E"
TITLE="[Mageia-dev] ffmpeg in mageia1 updates testing (revision 171164)">anssi at mageia.org
</A><BR>
<I>Sat Nov 26 16:05:20 CET 2011</I>
<P><UL>
<LI>Previous message: <A HREF="009850.html">[Mageia-dev] ffmpeg in mageia1 updates testing (revision 171164)
</A></li>
<LI>Next message: <A HREF="009792.html">[Mageia-dev] [Bug 3431] ffmpeg security update to version 0.7.8
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#9854">[ date ]</a>
<a href="thread.html#9854">[ thread ]</a>
<a href="subject.html#9854">[ subject ]</a>
<a href="author.html#9854">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>On 26.11.2011 16:47, Thomas Backlund wrote:
><i> 26.11.2011 16:15, Anssi Hannula skrev:
</I>>><i> On 26.11.2011 09:54, zezinho wrote:
</I>>>><i> Le samedi 26 novembre 2011 02:31:43, Anssi Hannula a écrit :
</I>>>>><i> About 75% of the crash issues fixed by the above 0.7 commits affect
</I>>>>><i> mga1
</I>>>>><i> 0.6.x, with a sample size of 70 commits.
</I>>>><i>
</I>>>><i> So maybe we should consider ffmpeg as Firefox : a software we must
</I>>>><i> upgrade
</I>>>><i> because upstream fixes security only in latest version.
</I>>><i>
</I>>><i> Unfortunately FFmpeg is much less 'stable' than firefox in both its
</I>>><i> dependencies and API across different series. Meaning that upgrade of
</I>>><i> FFmpeg often requires upgrade of libx264 (like in 0.6->0.7), or requires
</I>>><i> changes in software that uses FFmpeg (0.6->0.7 doesn't, however).
</I>>><i>
</I>>><i> The "easy" way out in this case could be upgrading FFmpeg 0.6->0.7 and
</I>>><i> x264 and doing extensive Q&A to avoid breakage. The "hard" way is
</I>>><i> backporting the ~200 relevant patches (most of which don't apply
</I>>><i> automatically).
</I>>><i>
</I>><i>
</I>><i> And you dont think upgrading to a new ffmpeg will bring new bugs and
</I>><i> need for new fixes...
</I>
Hence the quotes around "easy" and "hard".
><i> We dont even have BR about those bugs in our bugzilla, so apparently
</I>><i> they are not that important or not easy to hit.
</I>><i>
</I>><i>
</I>><i> The real easy way is: just apply the 5 security fixes and be done with it.
</I>><i>
</I>><i>
</I>><i> <A HREF="https://wiki.mageia.org/en/Updates_policy">https://wiki.mageia.org/en/Updates_policy</A>
</I>><i> "For the most part, an update should consist of a patched build of the
</I>><i> same version of the package released with the distribution"
</I>><i>
</I>><i>
</I>><i> If we start the "look at upstream, there are X number of fixes not in
</I>><i> our package", where does it end ??
</I>><i>
</I>><i> We will soon have to do it for every package, and that is Cauldron or a
</I>><i> rolling release, not really a stable release.
</I>
Obviously only security fixes are relevant.
><i> And we dont have the manpower in QA to start a updating frenzy like this.
</I>><i>
</I>><i> The point is simple: software _always_ have bugs. Thats a fact.
</I>><i>
</I>><i> upgrading from one version to another does not only "fix bugs",
</I>><i> it's also "replacing old bugs" with "new ones"
</I>
(BTW, I wasn't advocating upgrading FFmpeg 0.6->0.7, though admittedly
my post was badly worded so it might've looked like I was)
--
Anssi Hannula
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="009850.html">[Mageia-dev] ffmpeg in mageia1 updates testing (revision 171164)
</A></li>
<LI>Next message: <A HREF="009792.html">[Mageia-dev] [Bug 3431] ffmpeg security update to version 0.7.8
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#9854">[ date ]</a>
<a href="thread.html#9854">[ thread ]</a>
<a href="subject.html#9854">[ subject ]</a>
<a href="author.html#9854">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
