Package: nvi
Version: 1.79-26
Severity: important

The vi clone "nvi" never used to depend on libdb at all. Now
upgrading to 1.81.6-3 would suddenly require libdb4.2, while
the "current" versions of libdb in unstable are libdb4.6 and
libdb4.7. Versions 4.2, 4.3 and 4.4 were obsoleted years ago.

This has the ugly smell of a security problem to my nose, so
I'm holding the package back until I find out why a very minimal
text editor needs to depend on libdb at all, and why it is
depending on such an old version of it.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=fi_FI (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages nvi depends on:
ii  libc6                     2.7-12         GNU C Library: Shared libraries
ii  libncurses5               5.6+20080621-2 shared libraries for terminal hand

nvi recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to