Control: tags -1 moreinfo Hi,
On Tue, Dec 02, 2014 at 09:50:52AM +0100, Emmanuel Bourg wrote: > Please unblock package libhibernate-validator-java. The version 4.2.1 > currently in experimental fixes a security issue (#762690) and this new > version is required to build libspring-java 3.2.x which will fix two > more security issues (#760733 and #769698). > > Currently libhibernate-validator-java is only used as a build dependency > for a single package, libhibernate3-java, and I verified it builds fine > with the version 4.2.1. libhibernate-validator-java is never used at run > time. So despite the very long debdiff there is no risk of introducing > regressions in Jessie. The first diff contains this change: + * Switch to debhelper level 9 --- libhibernate-validator-java-4.0.2.GA/debian/compat 2013-10-21 16:07:39.000000000 +0200 +++ libhibernate-validator-java-4.2.1/debian/compat 2014-11-19 14:58:27.000000000 +0100 @@ -1 +1 @@ -5 +9 This is explicitly listed as not allowed in the freeze policy. https://release.debian.org/jessie/freeze_policy.html Please remove this change. I didn't look at the rest of the diff. Cheers, Ivo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
