Bug#771772: unblock: (pre-approval) libhibernate-validator-java/4.2.1-1

[Ivo De Decker <ivodd@debian.org>]

Control: tags -1 moreinfo

Hi,

On Tue, Dec 02, 2014 at 09:50:52AM +0100, Emmanuel Bourg wrote:
> Please unblock package libhibernate-validator-java. The version 4.2.1
> currently in experimental fixes a security issue (#762690) and this new
> version is required to build libspring-java 3.2.x which will fix two
> more security issues (#760733 and #769698).
> 
> Currently libhibernate-validator-java is only used as a build dependency
> for a single package, libhibernate3-java, and I verified it builds fine
> with the version 4.2.1. libhibernate-validator-java is never used at run
> time. So despite the very long debdiff there is no risk of introducing
> regressions in Jessie.

The first diff contains this change:

+  * Switch to debhelper level 9

--- libhibernate-validator-java-4.0.2.GA/debian/compat  2013-10-21 16:07:39.000000000 +0200
+++ libhibernate-validator-java-4.2.1/debian/compat     2014-11-19 14:58:27.000000000 +0100
@@ -1 +1 @@
-5
+9


This is explicitly listed as not allowed in the freeze policy.

https://release.debian.org/jessie/freeze_policy.html

Please remove this change.

I didn't look at the rest of the diff.

Cheers,

Ivo