Ok, I reviewed gupnp-igd and it's build-dependencies and think they are
not fit fur a hush-hush main inclusion:

gupnp-igd depends on gupnp, which had at least one serious security
issue in the past 3 months.

I think we should not hurry up to get those in main as they need to be
thoroughly reviewed by a member of the security team and with feature
freeze 14 days away, time is short.

But I'd like to have farsight2 0.0.14 in karmic nonetheless, so I
disabled gupnp-igd again (debdiff attached).

farsight2 (0.0.14-2ubuntu1) karmic; urgency=low

  * Merge from debian/unstable, remaining ubuntu changes: (LP: #410900)
    - debian/control:
      - don't depend on gstreamer0.10-plugins-bad, codecs moved to -good
      - bump dependendency on -good to 0.10.15-2ubuntu1 to have necessary
        codecs supported
    - debian/rules, debian/control:
      - disable gupnp-igd support, the necessary libraries are in universe

 -- Andreas Moog <am...@ubuntu.com>  Wed, 12 Aug 2009 00:49:41 +0200


** Attachment added: "farsight2_0.0.14-2ubuntu1.debdiff"
   http://launchpadlibrarian.net/30194873/farsight2_0.0.14-2ubuntu1.debdiff

-- 
Please merge farsight2 0.0.14-2 from debian/unstable
https://bugs.launchpad.net/bugs/410900
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to