Bug#263682: marked as done (Please use gcrypt11/gnutls11 instead of gcrypt7/gnutls10)

Debian Bug Tracking System owner@bugs.debian.org
Thu, 05 Aug 2004 06:18:22 -0700


Your message dated Thu, 05 Aug 2004 09:02:05 -0400
with message-id <E1Bshsj-000228-00@newraff.debian.org>
and subject line Bug#263682: fixed in librsvg2 2.7.2-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at maintonly) by bugs.debian.org; 5 Aug 2004 11:40:59 +0000
>From smurf@debian.org Thu Aug 05 04:40:59 2004
Return-path: <smurf@debian.org>
Received: from run.smurf.noris.de (server.smurf.noris.de) [192.109.102.41] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BsgVJ-0004xD-01; Thu, 05 Aug 2004 04:33:49 -0700
Received: from kiste.smurf.noris.de ([192.109.102.35] ident=smurf)
	by server.smurf.noris.de with smtp (Exim 4.34)
	id 1BsgRI-00051U-8v
	for maintonly@bugs.debian.org; Thu, 05 Aug 2004 13:29:41 +0200
Received: by kiste.smurf.noris.de (sSMTP sendmail emulation); Thu,  5 Aug 2004 13:29:40 +0200
Date: Thu,  5 Aug 2004 13:29:40 +0200
From: smurf@debian.org
Subject: Please use gcrypt11/gnutls11 instead of gcrypt7/gnutls10
To: maintonly@bugs.debian.org
Message-ID: <E1BsgRI-00051U-8v@server.smurf.noris.de>
X-Smurf-Spam-Score: -4.6 (----)
Delivered-To: maintonly@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.4 required=4.0 tests=BAYES_00,HAS_PACKAGE,
	NO_REAL_NAME autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Subject: Please use gcrypt11/gnutls11 instead of gcrypt7/gnutls10
Package: librsvg2
Severity: important

'librsvg2-bin' depends on gcrypt7 or gnutls10.

These packages are no longer supported by Upstream and contain serious
deficiencies / bugs which may turn out to be a security problem.
See [0] and followup emails, and [1] for further details.


Therefore, we want to get rid of gcrypt7 and gnutls10 in Sarge.

gcrypt11 and gnutls11 have an upwards-compatible API; in most cases you
only have to update your debian/control file.

Please upload a fixed version soon.  Thank you.


NB: I plan to do NMUs (on 2004-08-15) for any packages which haven't
    been updated at that time.

[0] http://lists.debian.org/debian-release/2004/07/msg00075.html
[1] http://bugs.debian.org/258975


---------------------------------------
Received: (at 263682-close) by bugs.debian.org; 5 Aug 2004 13:08:03 +0000
>From katie@ftp-master.debian.org Thu Aug 05 06:08:03 2004
Return-path: <katie@ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BshyV-00031H-00; Thu, 05 Aug 2004 06:08:03 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1Bshsj-000228-00; Thu, 05 Aug 2004 09:02:05 -0400
From: Josselin Mouette <joss@debian.org>
To: 263682-close@bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#263682: fixed in librsvg2 2.7.2-5
Message-Id: <E1Bshsj-000228-00@newraff.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Thu, 05 Aug 2004 09:02:05 -0400
Delivered-To: 263682-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Source: librsvg2
Source-Version: 2.7.2-5

We believe that the bug you reported is fixed in the latest version of
librsvg2, which is due to be installed in the Debian FTP archive:

librsvg2-2_2.7.2-5_i386.deb
  to pool/main/libr/librsvg2/librsvg2-2_2.7.2-5_i386.deb
librsvg2-bin_2.7.2-5_i386.deb
  to pool/main/libr/librsvg2/librsvg2-bin_2.7.2-5_i386.deb
librsvg2-common_2.7.2-5_i386.deb
  to pool/main/libr/librsvg2/librsvg2-common_2.7.2-5_i386.deb
librsvg2-dev_2.7.2-5_i386.deb
  to pool/main/libr/librsvg2/librsvg2-dev_2.7.2-5_i386.deb
librsvg2_2.7.2-5.diff.gz
  to pool/main/libr/librsvg2/librsvg2_2.7.2-5.diff.gz
librsvg2_2.7.2-5.dsc
  to pool/main/libr/librsvg2/librsvg2_2.7.2-5.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 263682@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Josselin Mouette <joss@debian.org> (supplier of updated librsvg2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu,  5 Aug 2004 14:13:23 +0200
Source: librsvg2
Binary: librsvg2-2 librsvg2-common librsvg2-bin librsvg2-dev
Architecture: source i386
Version: 2.7.2-5
Distribution: unstable
Urgency: medium
Maintainer: Takuo KITAME <kitame@debian.org>
Changed-By: Josselin Mouette <joss@debian.org>
Description: 
 librsvg2-2 - SAX-based renderer library for SVG files. (for GNOME2)
 librsvg2-bin - command-line and graphical viewers for SVG files
 librsvg2-common - SAX-based renderer library for SVG files. (for GNOME2)
 librsvg2-dev - SAX-based renderer library for SVG files. (development files)
Closes: 263682
Changes: 
 librsvg2 (2.7.2-5) unstable; urgency=medium
 .
   * Rebuild with libgnutls11 (closes: #263682).
   * debian/control.in: build-depend on libgnomevfs2-dev 2.6.1.1-6 to force
     use of libgnutls11.
Files: 
 0a48b9bde9f5093fd0b97418771f5be6 1668 libdevel optional librsvg2_2.7.2-5.dsc
 8be93b32f3c119e4cf758326f2d206bd 5994 libdevel optional librsvg2_2.7.2-5.diff.gz
 dc900a417e46bf726575ab20cf0af70c 109140 libdevel optional librsvg2-dev_2.7.2-5_i386.deb
 5a6e2a05a88fdb6d0e284a04e488fcd1 89812 libs optional librsvg2-2_2.7.2-5_i386.deb
 ef35ac0bc72bd85f974a21dda9ffed6e 38570 libs optional librsvg2-common_2.7.2-5_i386.deb
 cdec2a00e358522ffe2e9144bb8ffe0d 37466 graphics optional librsvg2-bin_2.7.2-5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBEiucrSla4ddfhTMRAgaOAJ9ay7WUd3DlT8tyMRqd8Co5bnxD9ACeNrGy
UTiGQEF7faEAZDJnPhNH7lk=
=IEPa
-----END PGP SIGNATURE-----