Package: release.debian.org Severity: normal viewvc/1.0.9-1 fixes grave security bug #545779, but can't migrate to squeeze because it would make gforge-plugin-scmsvn (from src:gforge) uninstallable. This is because g-p-s still depends on the viewcvs transitional package, which was already transitional in lenny and no longer exists in sid. I filed #552524 against g-p-s.
Please consider pushing viewvc/1.0.9-1 into squeeze anyway; this would make
g-p-s uninstallable there (as a workaround, users could take the viewcvs
transitional binary package from lenny). If I'm reading the docs correctly,
this hint would be appropriate:
# breaks gforge-plugin-scmsvn (#552524) but fixes security bug (#545779)
force viewvc/1.0.9-1
Regards,
Simon
signature.asc
Description: Digital signature
