On Sun, Sep 10, 2006 at 03:56:39PM +0200, David Schmitt wrote: > Please find attached a minimal patch, fixing the binNMU security.
This patch fixes nothing. There is *no* way for an arch: all package to have a strict versioned dependency on an arch: any package and still be binNMU safe. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. [EMAIL PROTECTED] http://www.debian.org/ > diff -uwrbN libgtk-java-2.8.5.binNUMsave/debian/control > libgtk-java-2.8.5/debian/control > --- libgtk-java-2.8.5.binNUMsave/debian/control 2006-09-10 > 15:54:33.000000000 +0200 > +++ libgtk-java-2.8.5/debian/control 2006-09-10 15:54:50.000000000 +0200 > @@ -3,13 +3,13 @@ > Priority: optional > Maintainer: Debian Java maintainers > <pkg-java-maintainers@lists.alioth.debian.org> > Uploaders: Mark Howard <[EMAIL PROTECTED]> > -Build-Depends: debhelper (>> 5), libgtk2.0-dev (>=2.6), gcj, > java-gcj-compat-dev, docbook, docbook-utils, cdbs (>= 0.4.34), pkg-config, > libglib-java, libcairo-java, dpkg-dev (>= 1.13.19) > +Build-Depends: debhelper (>> 5), libgtk2.0-dev (>=2.6), gcj, > java-gcj-compat-dev, docbook, docbook-utils, cdbs (>= 0.4.34), pkg-config, > libglib-java, libcairo-java > Standards-Version: 3.7.2.0 > > Package: libgtk-java > Section: libs > Architecture: all > -Depends: libgtk-jni (= ${binary:Version}), libglib-java, libcairo-java > +Depends: libgtk-jni (= ${Source-Version}), libglib-java, libcairo-java > Replaces: libgtk0-java, libgtk2-java > Conflicts: libgtk2-java > Description: GTK+ bindings for Java > @@ -37,7 +37,7 @@ > Package: libgtk-jni > Section: libs > Architecture: any > -Depends: ${shlibs:Depends}, libgtk-java (= ${binary:Version}) > +Depends: ${shlibs:Depends}, libgtk-java (= ${Source-Version}) > Replaces: libgtk0-jni, libgtk2-jni > Conflicts: libgtk2-jni > Description: GTK+ bindings for Java -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
