4 ms·
> Or just bundle local versions of dependencies yourself and stop relying on shared libraries. That’s what VLC did, Ubuntu/Debian patched VLC to instead use th
by kuschku 7y ago
> Or just bundle local versions of dependencies yourself and stop relying on shared libraries.
That’s what VLC did, Ubuntu/Debian patched VLC to instead use their, older, shared libraries.
I’m not sure what course of action you suggest for developers in such a situation
- tatersolid 7y ago> I’m not sure what course of action you suggest for developers in such a situation Talk to somebody at Debian? Or submit a package update for the dependency with a security label?
- rndgermandude 7y agoLet's just waste the limited time the VLC devs can spend (for free) on their project by making them chase after debian maintainers and other distros' maintainers... to get them to update a library that isn't even a VLC project... because debian decided to patch out the library version bundled with VLC in favor of their own outdated libebml package... to get a bug patched that wasn't even considered a security issue until recently... Sorry, but this sounds ridiculous to me.