[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#771562: Pre-approval for libetpan/1.6-1



Control: tags -1 - moreinfo

Hi Ivo,

On Wed, Dec 03, 2014 at 07:39:14PM +0100, Ivo De Decker wrote:
> Control: tags -1 moreinfo
> 
> Hi,
> 
> On Sun, Nov 30, 2014 at 08:04:47PM +0100, Ricardo Mones wrote:
> > Libetpan's upstream has made a new release¹ targetted to
> > fix POODLE breakage (CVE-2014-3566) and some other bugfixes,
> > albeit one feature was added, hence the pre-approval request.
> > 
> > Unfortunately it also includes a large ammount of fixed
> > source file copyright/license headers which were missing,
> > but now causes some noise. These were excluded from the
> > filtered diff, but only when there were on other changes
> > in the file, so still some there.
> > 
> > Appart from that, most of changes not related to the above
> > bugfixes are type or typecast fixes (which cause also a
> > lot of noise, but still there). Diffstat summary is:
> > 
> > 104 files changed, 1778 insertions(+), 1109 deletions(-)
> > 
> > No soname bump, and only added symbols, which is the good
> > part.
> 
> The diff quite big, and includes a number of changes which don't comply with
> the freeze policy.
> 
> https://release.debian.org/jessie/freeze_policy.html

Yep, but the changes are mostly type fixes. New functions added won't be
called by any of the library dependencies in jessie, so I don't see how
they could cause trouble.

> A targeted fix (as a patch on top of the current version in testing, so
> without the new upstream) might be acceptable, but keep in mind that the
> deadline for fixes for important bugs is Dec 5th.

I'm sorry but I have not time for preparing that for tomorrow. Unfortunately
it already took a lot of time to prepare and test this one.

If somebody else is willing and able to do such, I'm open and happy to accept
NMUs or even give the package away.

Best regards,
-- 
  Ricardo Mones 
  ~
  RTFM - "Read The Manual" (The 'F' is silent). Usually a very good 
  idea.                                             Bjarne Stroustrup

Attachment: signature.asc
Description: Digital signature


Reply to: