Bug#638595: WWWOFFLE HTTPS now unusable

Andreas Metzler ametzler at downhill.at.eu.org
Mon Aug 22 18:18:26 UTC 2011


severity 638595 important
thanks
On 2011-08-21 jidanni at jidanni.org wrote:
> rename 638595 HTTPS now unusable
> reassign 638595 libgnutls26
> found 638595 2.12.7-6
> severity 638595 critical
> thanks
> >>>>> "A" == Andrew M Bishop <amb at gedanken.demon.co.uk> writes:
> A> I am having the problems as well now (I hadn't realised it until you
> A> pointed it out) and I haven't changed my version of WWWOFFLE for a
> A> long time but gnutls has changed recently.
> A> Everything that I can see points to gnutls in Debian (Wheezy at least)
> A> as being the cause of these problems with WWWOFFLE.

Quoting http://www.debian.org/Bugs/Developer.en.html#severities:
-----------------------
critical
    makes unrelated software on the system (or the whole system)
    break, or causes serious data loss, or introduces a security hole
    on systems where you install the package.
grave
    makes the package in question unusable or mostly so, or causes
    data loss, or introduces a security hole allowing access to the
    accounts of users who use the package.
serious
    is a severe violation of Debian policy (roughly, it violates a
    "must" or "required" directive), or, in the package maintainer's
    or release manager's opinion, makes the package unsuitable for
    release.
------------------------

This definitely is not a critical bug. wwwoffle links against gnutls,
it is not "unrelated software". It is not a security hole either.

Downgrading to non-release critical status at least for the time
being, since this should not block propagation of 2.12.7-7 (which
definitly does fix a rc-bug) to testing.

cu andreas

-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'





More information about the Pkg-gnutls-maint mailing list