New audiofile tarball [was: Re: Meeting minutes (April 10th)]

[Andre Klapper <ak-47 gmx net>]

Am Dienstag, den 13.04.2010, 15:36 +0200 schrieb Vincent Untz:
> Apr 28 2.30.1  fredp
> May 05 2.31.1  mclasen

audiofile is a deprecated module of the GNOME 2.x platform that we ship
in our releases. It has recently seen a tarball release fixing a
vulnerability issue[1].
The tarball is not available at
http://ftp.gnome.org/pub/GNOME/sources/audiofile/0.2/ but at
http://www.68k.org/~michael/audiofile/audiofile-0.2.7.tar.gz and we
should include it in future GNOME releases.

Do we simply want to copy the "external" tarball to ftp.gnome.org, do we
turn it into an external dependency, or any other proposals?

andre

[1] https://bugzilla.gnome.org/show_bug.cgi?id=603198
-- 
 mailto:ak-47 gmx net | failed
 http://www.iomc.de/  | http://blogs.gnome.org/aklapper