Package: release.debian.org
Severity: normal
viewvc/1.0.9-1 fixes grave security bug #545779, but can't migrate to squeeze
because it would make gforge-plugin-scmsvn (from src:gforge) uninstallable.
This is because g-p-s still depends on the viewcvs transitional package,
which was already transitional in lenny and no longer exists in sid. I filed
#552524 against g-p-s.
Please consider pushing viewvc/1.0.9-1 into squeeze anyway; this would make
g-p-s uninstallable there (as a workaround, users could take the viewcvs
transitional binary package from lenny). If I'm reading the docs correctly,
this hint would be appropriate:
# breaks gforge-plugin-scmsvn (#552524) but fixes security bug (#545779)
force viewvc/1.0.9-1
Regards,
Simon
Attachment:
signature.asc
Description: Digital signature