Bug#679041: transition: wireshark

[Bálint Réczey <balint@balintreczey.hu>]

2012/6/26 Mehdi Dogguy <mehdi@dogguy.org>:
> Hi,
>
> On 26/06/2012 00:10, Bálint Réczey wrote:
>>
>>
>> I'd like to upload the latest version of wireshark to unstable.
>> Updating from 1.6.8 to 1.8.0 brings a new ABI with a new soname for
>> all the libs. Having Wireshark 1.8.x in Wheezy is important because
>> upstream's support for 1.6.x ends on June 7, 2013 [1] and Wireshark
>> needs regular security updates.
>>
>
> Thanks for letting us know. Unfortunately, we think that this update
> came a tad late because we are >that< near to freeze and the update
> seems quite large.
This is why i don't want to risk backporting security fixes from 1.8.x to 1.6.x.

>
> About the security concerns, as far as I can see, updating wireshark to
> 1.8 in Wheezy would not buy us more than a year. AFAIK, the security
One year is practically one third of Wheezy support time. This is huge.

> team didn't raise any concerns about this package in the past. Are there
> any other concerns with the 1.6.8 release besides the security aspect?
The security aspect is the most important one. Supporting 1.6.x put too much
load on the single maintainer of wireshark. Another important factor
is that we may
want to ship reasonably fresh software to users.

Note that 1.8.0~rc1-1 has been uploaded to the NEW queue weeks ago... [1]

Please let the package in.

Thanks,
Balint

[1]: http://ftp-master.debian.org/new/wireshark_1.8.0~rc1-1.html