Package: release.debian.org Severity: normal Tags: wheezy User: release.debian....@packages.debian.org Usertags: pu
Dear Release Team, I'd like a new version of mediatomb be uploaded to oldstable/wheezy. The mediatomb package in wheezy is 0.12.1-4 at the moment and it's affected by a security issue reported in: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=580120 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600025 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778669 Debian Security Team marked the issue as "no-DSA"[1], and I got confirmation from them that a simple proposed-update via the Debian Release Team was all that was needed. This issue was fixed in squeeze as a NMU but this fix was not included in the following maintainer upload. The squeeze patch was reapplied and is available in testing and unstable in version 0.12.1-47-g7ab7616-1. I've cleaned up the debian git commit a bit [2] and prepared a new mediatomb 0.12.1-4+deb7u1 package. Attached, you'll find a debdiff for it. I don't currently have uploading privileges. If this is approved I will push the changes into git and ask for it to be sponsored if needed. Thanks for considering. - Miguel [1] https://security-tracker.debian.org/tracker/580120 [2] http://anonscm.debian.org/cgit/pkg-multimedia/mediatomb.git/commit/debian?id=a8038493cc4df1a4a432252cf9762d3a6c8e8f79
mediatomb_0.12.1-4+deb7u1.dsc.debdiff
Description: Binary data