Bug#751527: wheezy-pu: package libdbi-perl/1.622-1+deb7u1

[Salvatore Bonaccorso <carnil@debian.org>]

Hi,

On Thu, Jun 19, 2014 at 01:06:14PM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On 2014-06-13 19:51, Salvatore Bonaccorso wrote:
> >libplrpc-perl was removed from the archive for unstable[1] as it uses
> >Storable in an unsafe way, leading to a remote code execution
> >vulnerability. The idea is to also drop libplrpc-perl from wheezy and
> >squeeze if possible.
> >
> >As first step toward this goal I propose to drop the dependency from
> >libdbi-perl package. Note: There is no real code change in wheezy to
> >unstable in the corresponding module part, altough in the Debian
> >package itself libplrpc-perl moved from Depends to Suggests following
> >upstream recommentation (in version 1.627-1).
> >
> > [1] https://bugs.debian.org/734789
> >     https://bugs.debian.org/745477
> >
> >For the debdiff: I removed the dependency (as done for unstable, added
> >a patch to add a Security notice in the Proxy modules, and also
> >removed installation of the dbiproxy script).
> 
> Please go ahead; thanks.

Thank you, just uploaded.

Regards,
Salvatore