On Thu, 4 Dec 2014 11:03:46 +0100 Ricardo Mones <mones@debian.org> wrote: > Control: tags -1 - moreinfo > > Hi Ivo, > > On Wed, Dec 03, 2014 at 07:39:14PM +0100, Ivo De Decker wrote: > > Control: tags -1 moreinfo > > > > Hi, > > > > On Sun, Nov 30, 2014 at 08:04:47PM +0100, Ricardo Mones wrote: > > > Libetpan's upstream has made a new release¹ targetted to > > > fix POODLE breakage (CVE-2014-3566) and some other bugfixes, > > > albeit one feature was added, hence the pre-approval request. > > > > > > Unfortunately it also includes a large ammount of fixed > > > source file copyright/license headers which were missing, > > > but now causes some noise. These were excluded from the > > > filtered diff, but only when there were on other changes > > > in the file, so still some there. > > > > > > Appart from that, most of changes not related to the above > > > bugfixes are type or typecast fixes (which cause also a > > > lot of noise, but still there). Diffstat summary is: > > > > > > 104 files changed, 1778 insertions(+), 1109 deletions(-) > > > > > > No soname bump, and only added symbols, which is the good > > > part. > > > > The diff quite big, and includes a number of changes which don't comply > > with the freeze policy. > > > > https://release.debian.org/jessie/freeze_policy.html > > Yep, but the changes are mostly type fixes. New functions added won't be > called by any of the library dependencies in jessie, so I don't see how > they could cause trouble. > > > A targeted fix (as a patch on top of the current version in testing, so > > without the new upstream) might be acceptable, but keep in mind that the > > deadline for fixes for important bugs is Dec 5th. > > I'm sorry but I have not time for preparing that for tomorrow. > Unfortunately it already took a lot of time to prepare and test this one. > > If somebody else is willing and able to do such, I'm open and happy to > accept NMUs or even give the package away. Since unfortunately it seems I'm the only one who cares about this library I'd prefer it to be in jessie as proposed. So please, reconsider. As said changes, while may look a lot, they're not intrusive and new entry points are not going to be used by current rdepends. Thanks in advance, -- Ricardo Mones http://people.debian.org/~mones «... this must be what it's like to be a COLLEGE GRADUATE!!»
Attachment:
pgpZ2Z7oxNxOS.pgp
Description: OpenPGP digital signature