1 * Issue http://bugs.debian.org/682010 http://bugs.debian.org/675971
2 ** Mumble in unstable/testing currently cannot interact with other clients and servers
3 + Due to the removal of celt http://bugs.debian.org/676592 and disabling of celt compilation options
4 + Mumble dropping speex in unstable and speex not being selected at higher bandwidths
5 + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675971#51
6 + Interoperation: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675971#61
9 + Server (and clients?) do not select speex as an option unless bandwidth is low
10 + May be resolved by Thorvald Natvig with a hack
11 + Clients cannot currently report speex version (support?) during codec selection process
12 + Requires code modification for selection process and re-enabling speex
13 + Clients do not use speex unless bandwidth is <= 32kb/s
14 + After mods should be backward compatible with existing clients
15 ** Include celt 0.7.1 as a convenience copy
16 + Security Issues with embedded copies
17 + Mitigated as mumble would have the only copy
18 + Unspecified possible security issues
19 + Potential remote crasher
20 + -348 is currently this way in testing
21 + Deprecated upstream in favor of opus
22 ** Do not release with mumble
23 + Unsatisfactory to users of mumble
24 ** Upload a celt 0.7.1 package
25 + No maintainer desires to deal with this (apparently?)
26 + Upstream do not wish additional packages to use celt; wish transition to opus
27 + Unspecified possible security issues
28 + Proliferates celt library downstream
31 + Opus itself released upstream
32 + Code to enable opus in mumble has not been released
33 + Will not communicate with non-opus clients or servers
34 + Unlikely to be RM acceptable at this point
36 ** Can speex be made to be an option?
37 + Thorvald thinks so; no patch as of yet (off for a week?)
38 + Ron asked to work on this with Thorvald; report back before 13th of August.
39 ** Is a convenience copy acceptable, assuming mumble is the only thing with it?
40 + Possible remote crasher bug is the primary objection to allowing this
41 ** What are the other clients that we want to make sure the mumble servers can communicate with?
42 + Note that this table is only for a single client connected to a single server
43 + 348 is 1.2.3-348-g317f5a0-1 (currently in wheezy)
44 + 349 is 1.2.3-349-g315b5f5-2 (currently in sid)
45 |--------------------+----------------------+----------------+-----------+-----------|
46 | client/server | Deb 1.2.2-6+squeeze1 | Deb 1.2.3-2+b2 | Deb "348" | Deb "349" |
47 |--------------------+----------------------+----------------+-----------+-----------|
48 | Deb. Client "348" | Yes | Yes | Yes | Yes |
49 | Deb. Client "349" | No | No | Yes | Yes |
50 | Win. Client 1.2.3a | Yes | Yes | Yes | Yes |
51 | Win. Client "361" | Yes | Yes | Yes | Yes |
52 | Mac Client 1.2.2 | Yes | Yes | Yes | Yes |
53 |--------------------+----------------------+----------------+-----------+-----------|
57 1. The questions surrounding the codecs in mumble, especially celt,
58 have been referred to the Technical Committee.
60 2. The mumble maintainers have stated their willingness to follow
61 our advice (Constitution 6.1(5)). This may or may not amount to
62 a delegation to us of the decision (6.1(3)) but in any case we
63 merely need to state our reasoning and conclusions and are not
64 being asked to overrule the maintainer.
66 Release Critical status of celt 0.7.1 in mumble:
68 3. mumble is a useful and fairly widely-used voice chat program.
70 4. Distributions of mumble (from other distros and upstream)
71 currently implement the celt 0.7.1 codec as a baseline. It does
72 not appear to the TC that (in wheezy) the provision of any other
73 codec obviates the need for mumble to support celt 0.7.1.
74 mumble with celt 0.7.1 has been tested and found to interoperate
75 properly with nearly all other mumble versions.
77 5. Consequently, we consider the lack of celt 0.7.1 support in
78 mumble a release-critical bug.
80 Security risks from celt 0.7.1:
82 6. While the upstream security support situation for celt 0.7.1 is
83 not ideal, the TC does not consider that the security risks
84 associated with celt 0.7.1 in mumble are intolerable.
86 7. The Debian Security Team have stated that they have no objection
87 to including celt 0.7.1 in mumble in wheezy.
89 8. Consequently, mumble should remain in wheezy with celt 0.7.1
90 (the alternative being to remove mumble as unfit for release).
94 9. There are no other packages intended for wheezy which ought to
97 10. Providing separate celt library in wheezy is undesirable because
98 it might promote the use of a codec which we are planning to
99 retire in the medium to long term.
101 11. While embedded code copies are in general to be avoided because
102 lead to proliferation of multiple versions, that therefore does
103 not apply in this case.
105 12. The upstream mumble source already contemplates building with
106 various embedded versions of celt.
108 13. There is no reason to support any other version of celt in
111 14. Consequently, the mumble source package should be configured to
112 use an embedded copy of celt 0.7.1. (If necessary the embedded
113 copy of celt in the source package should be updated to the
116 We therefore recommend that:
118 15. The mumble maintainers, with appropriate help from other
119 interested parties, should prepare an upload of mumble for wheezy
121 - embedded celt 0.7.1 enabled
122 - no other version of celt enabled
123 - whatever other release-critical bugfixes they consider
124 relevant (subject to any appropriate discussion with the
125 release team as necessary)
128 16. #675971 should remain at an RC severity, be untagged wontfix,
129 and maintained open until it is closed as discussed above.
131 17. If the release team are content with the other changes
132 in the new mumble package, the new version should be unblocked
133 to propagate into wheezy.
135 18. After that propagation, the separate celt packages should be
136 removed from wheezy. This should be requested by the celt
137 maintainer filing a removal bug in the normal way, after mumble
138 with embedded celt 0.7.1 has propagated to wheezy.
140 ** Chris.Knadle@coredump.us, Ron <ron@debian.org>, 682010@bugs.debian.org, 675971@bugs.debian.org, Nicos Gollan <gtdev@spearhead.de>, Thorvald Natvig <thorvald@natvig.com>