Re: Updating Minetest to 5.5

Travis Wrightsman wrote:

> What are the team's thoughts on how to move forward? Do people agree
> that packaging the Minetest Irrlicht fork is reasonable?

I am disappointed that game developers using irrlicht are not able to
collaborate and fix the issues in irrlicht upstream that they are
coming across that are leading to the forks.

I note the security team's tracker says that supertuxkart has an
embedded modified version of irrlicht (aka another fork).

https://wiki.debian.org/EmbeddedCopies
https://salsa.debian.org/security-tracker-team/security-tracker/raw/master/data/embedded-code-copies

I note irrlicht has had one security issue in the past, it is likely
that it has other issues that are as yet undiscovered. So if it enters
Debian, ensure you get the minetest irrlicht fork recorded in the
Debian security team code copies file.

https://security-tracker.debian.org/tracker/source-package/irrlicht
https://salsa.debian.org/security-tracker-team/security-tracker/raw/master/data/embedded-code-copies

It might be worth attempting to build minetest against upstream
irrlicht just to see how much breakage there is. If that ends up as too
much breakage, then packaging the fork seems reasonable for now.

I think the binary package names in src:minetest-irrlicht should be
irrlicht-minetest to indicate this is a fork of irrlicht rather than an
irrlicht plugin for minetest. Also they need to fit the standard Debian
naming conventions for libraries etc.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

-----BEGIN PGP SIGNATURE-----
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=ahFu
-----END PGP SIGNATURE-----