Hi, > A new upstream version 0.7.5 of ettercap (a network sniff/attack tool) > fixes a variety of security issues. It does not seem practical to me > to backport the fixes, because many of them are made on top of > non-security-related changes, and teasing them apart etc would be a > great deal of work and also quite error-prone.
> The upstream team is very eager to get the new version in place, and I > find their reasoning compelling. Well, as a Debian Developer you should know that during a freeze, no new upstream releases are allowed into testing. You should therefore either cherrypick the fixes or request a removal of the package from testing. I am pretty sure that the new upstream release has little to no chances to get into testing, so I would like to ask you to take one of the two aforementioned actions. It's a bit frustrating to see that the release gets delayed because of situations like these. The relase policy has been known for a long time and you should adhere to it. Cheers, Adrian -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org