Hi again, On 2018-10-04 19:39:11 (+0200), David Runge wrote: > I'm happy to see, that there has been some activity for sox this year. > I'm even more happy to see, that a lot of CVEs got fixed by patching it! > > Currently, I'm maintaining sox for Arch Linux. I'd love to see a new > release, so I can drop all the extra patches soon. > It would of course generally be awesome to have more frequent releases > again! Is this a possibility for the current developers/maintainers? I > know, that this is not really an easy task... > > Is there any ticket preventing a new release? If so, how can the process > be helped? as sox has now accumulated a total of twelve (!) CVEs for version 14.4.2 [1], I'd like to once more urge the current maintainers to tag a new release.
Given the maintenance burden of applying all of these patches (and the numerous other bugfixes that have been added [2]) on top of the last stable release in a packaging context, I would very much like to see a new release. Is there anything preventing it? Is there something that can be helped with? Best, David [1] https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sox [2] https://sourceforge.net/p/sox/code/commit_browser -- https://sleepmap.de
signature.asc
Description: PGP signature
_______________________________________________ SoX-devel mailing list SoX-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sox-devel
