Package: release.debian.org User: release.debian.org@packages.debian.org Usertags: transition Severity: normal Forwarded: https://release.debian.org/transitions/html/auto-polarssl.html X-Debbugs-CC: polarssl@packages.debian.org Hi, polarssl needs a library transition. The name of the upstream project changed to 'mbedtls' so the SONAME has become 'libmbedtls9'. I've kept the name of the dev package as 'libpolarssl-dev' for the 1.3 series so every package doesn't need to be changed. The new version of polarssl fixes a grave security bug (#801413). I havn't got a response from the package maintainer at all in dealing with this so I NMUed the version currently in experimental. There is a build failure on s309x, but the fix should be a 1 line change which I'd like to make when I upload the package to unstable. If you'd prefer I could make another NMU to experimental instead. Thanks, James Ben file (the automatic one is fine): title = "polarssl"; is_affected = .depends ~ "libpolarssl7" | .depends ~ "libmbedtls9"; is_good = .depends ~ "libmbedtls9"; is_bad = .depends ~ "libpolarssl7";
Attachment:
signature.asc
Description: This is a digitally signed message part