Next release

Next release

[David Runge]

[-- Attachment #1.1: Type: text/plain, Size: 605 bytes --]

Hey all,

I'm happy to see, that there has been some activity for sox this year.
I'm even more happy to see, that a lot of CVEs got fixed by patching it!

Currently, I'm maintaining sox for Arch Linux. I'd love to see a new
release, so I can drop all the extra patches soon.
It would of course generally be awesome to have more frequent releases
again! Is this a possibility for the current developers/maintainers? I
know, that this is not really an easy task...

Is there any ticket preventing a new release? If so, how can the process
be helped?

Best,
David

-- 
https://sleepmap.de

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



[-- Attachment #3: Type: text/plain, Size: 158 bytes --]

_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

Re: Next release

[David Runge]

[-- Attachment #1.1: Type: text/plain, Size: 1260 bytes --]

Hi again,

On 2018-10-04 19:39:11 (+0200), David Runge wrote:
> I'm happy to see, that there has been some activity for sox this year.
> I'm even more happy to see, that a lot of CVEs got fixed by patching it!
> 
> Currently, I'm maintaining sox for Arch Linux. I'd love to see a new
> release, so I can drop all the extra patches soon.
> It would of course generally be awesome to have more frequent releases
> again! Is this a possibility for the current developers/maintainers? I
> know, that this is not really an easy task...
> 
> Is there any ticket preventing a new release? If so, how can the process
> be helped?
as sox has now accumulated a total of twelve (!) CVEs for version 14.4.2
[1], I'd like to once more urge the current maintainers to tag a new
release.

Given the maintenance burden of applying all of these patches (and the
numerous other bugfixes that have been added [2]) on top of the last
stable release in a packaging context, I would very much like to see a
new release.

Is there anything preventing it? Is there something that can be helped
with?

Best,
David

[1] https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sox
[2] https://sourceforge.net/p/sox/code/commit_browser

-- 
https://sleepmap.de

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



[-- Attachment #3: Type: text/plain, Size: 158 bytes --]

_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

Re: Next release

[David Runge]

[-- Attachment #1.1: Type: text/plain, Size: 997 bytes --]

Hi again,

On 2019-05-23 18:04:18 (+0200), David Runge wrote:
> On 2018-10-04 19:39:11 (+0200), David Runge wrote:
> > Is there any ticket preventing a new release? If so, how can the
> > process be helped?
> as sox has now accumulated a total of twelve (!) CVEs for version 14.4.2
> [1], I'd like to once more urge the current maintainers to tag a new
> release.

It has been several months now since my last mail, to which I never got
a reply and nearly a year since my first mail in regards to this topic
(which has also been ignored).

I find it highly concerning and by now rate it as negligent, that the
current maintainers are seemingly eager to merge further features in,
but not release a new version of this tool to have a stable release,
that is not riddled with CVEs.

I am unable to comprehend this behavior and the absolute radio silence
in regards to this topic and once more would like to ask for a release
of sox.

Best,
David

-- 
https://sleepmap.de

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



[-- Attachment #3: Type: text/plain, Size: 158 bytes --]

_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

Re: Next release

[Claude Warren]

[-- Attachment #1.1: Type: text/plain, Size: 1553 bytes --]

I have to agree.  It is time to release.  What is stopping the release?  Is
it process issues?  Nobody remembers how?  Can someone (myself) volunteer
to help?

On Sun, Sep 1, 2019 at 12:32 AM David Runge <dave@sleepmap.de> wrote:

> Hi again,
>
> On 2019-05-23 18:04:18 (+0200), David Runge wrote:
> > On 2018-10-04 19:39:11 (+0200), David Runge wrote:
> > > Is there any ticket preventing a new release? If so, how can the
> > > process be helped?
> > as sox has now accumulated a total of twelve (!) CVEs for version 14.4.2
> > [1], I'd like to once more urge the current maintainers to tag a new
> > release.
>
> It has been several months now since my last mail, to which I never got
> a reply and nearly a year since my first mail in regards to this topic
> (which has also been ignored).
>
> I find it highly concerning and by now rate it as negligent, that the
> current maintainers are seemingly eager to merge further features in,
> but not release a new version of this tool to have a stable release,
> that is not riddled with CVEs.
>
> I am unable to comprehend this behavior and the absolute radio silence
> in regards to this topic and once more would like to ask for a release
> of sox.
>
> Best,
> David
>
> --
> https://sleepmap.de
> _______________________________________________
> SoX-devel mailing list
> SoX-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sox-devel
>


-- 
I like: Like Like - The likeliest place on the web
<http://like-like.xenei.com>
LinkedIn: http://www.linkedin.com/in/claudewarren

[-- Attachment #1.2: Type: text/html, Size: 2589 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



[-- Attachment #3: Type: text/plain, Size: 158 bytes --]

_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

Re: Next release

[Måns Rullgård]

David Runge <dave@sleepmap.de> writes:

> Hi again,
>
> On 2019-05-23 18:04:18 (+0200), David Runge wrote:
>> On 2018-10-04 19:39:11 (+0200), David Runge wrote:
>> > Is there any ticket preventing a new release? If so, how can the
>> > process be helped?
>> as sox has now accumulated a total of twelve (!) CVEs for version 14.4.2
>> [1], I'd like to once more urge the current maintainers to tag a new
>> release.
>
> It has been several months now since my last mail, to which I never got
> a reply and nearly a year since my first mail in regards to this topic
> (which has also been ignored).
>
> I find it highly concerning and by now rate it as negligent, that the
> current maintainers are seemingly eager to merge further features in,
> but not release a new version of this tool to have a stable release,
> that is not riddled with CVEs.
>
> I am unable to comprehend this behavior and the absolute radio silence
> in regards to this topic and once more would like to ask for a release
> of sox.

I can assure you that your demanding tone isn't going to get you a
release any sooner.

-- 
Måns Rullgård


_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel