libsndfile status?

[Hans de Goede]

Hi,

On 11/13/2009 09:37 AM, Orcan Ogetbil wrote:
> On Tue, Nov 3, 2009 at 12:47 PM, Orcan Ogetbil wrote:
>> On Tue, Nov 3, 2009 at 4:48 AM, Michael Schwendt wrote:
>>> https://admin.fedoraproject.org/pkgdb/packages/bugs/libsndfile
>>>
>>> What's up with libsndfile in Fedora and EPEL?
>>> There are open tickets about CVEs filed in March.
>>> There are additional tickets without any reply.
>>>
>>
>> Yeah, things go a little slow with libsndfile. Because of the old
>> version we have in<  Fedora 12 we also are not able to update some of
>> our audio packages.
>> I requested for comaintainership to fix the bugs filed to Fedora.
>>
>> Orcan
>>
>
> We can't reach the maintainer. We tried it in various ways at various
> times, e.g. [1].
>
> I even offered help but got nothing... Shall I fix the bugs and update
> the package with my "proven" powers? I don't like to do substantial
> changes on other people's packages. But this one has a security bug
> that is open for 8 months... Also a few users asked me to update
> ardour but I can't do it without updating libsndfile.
>
> What shall we do?
>

I would say just go ahead and fix it, and maybe start an awol maintainer
procedure so that you can eventually take over the package.

Regards,

Hans