Re: [PATCH]: libtiff update

[Mark H Weaver]

Andreas Enge <address@hidden> writes:

> The first attached patch updates libtiff to 4.0.5. I think that all security
> fixes have been integrated there, since debian dropped all patches.

Excellent, thanks!

> The second patch builds with libjpeg-9 instead of libjpeg-8.
>
> Comments are welcome.
>
> I would like to create a separate branch for hydra and apply the two patches
> one after one, unless you think this poses too much strain on the build farm.
> I think the second patch might be problematic, as conflicts could occur in
> dependent packages that still use libjpeg-8, so it would be nice to assess
> its impact separately.

I'd really rather avoid this.  In my experience, it usually doesn't take
much effort to determine which update caused a problem.  Hydra is very
low on all of the important resources: RAM, disk space, disk bandwidth,
etc.  Given these facts, we simply cannot afford to give it an extra
3000+ builds just to save ourselves a few minutes of debugging time
later.

Instead of building this out as a dedicated branch, I'd much prefer to
simultaneously push these two commits to core-updates, and then deal
with any problems as they arise, unless there is some reason why these
updates must be deployed ASAP.  We already have a lot of other updates
on core-updates, and more that should be added before we build it fully,
such as fontconfig, glib, sqlite, etc.  We cannot afford to build them
all out separately.

What do you think?

      Mark