[DRE-maint] Bug#608397: redmine security issues fixed in 1.0.5

[Jérémy Lal]

Hi,

On 04/01/2011 21:23, Julien Cristau wrote:
> user release.debian.org at packages.debian.org
> usertag 608397 squeeze-can-defer
> tag 608397 squeeze-ignore
> kthxbye
> 
> On Sat, Jan  1, 2011 at 19:38:35 +0100, Julien Cristau wrote:
> 
>> On Fri, Dec 31, 2010 at 23:53:11 +0100, Jérémy Lal wrote:
>>
>>> Hi,
>>> i'd need some tip about how to manage the situation with redmine package :
>>> version 1.0.1-1 is in testing, version 1.0.5-1 in unstable (my bad, i should
>>> have uploaded it to experimental).
>>> I would like to see either redmine 1.0.5-1 go to testing, or backport the
>>> security issues i'm aware of to a 1.0.1-2 version -- i know this is the
>>> solution when deep freeze is in effect.
>>> The question being : where should i upload 1.0.1-2 ? t-p-u ?
>>>
>> Or testing-security.  In any case, please prepare the package and come
>> back to us and the security team when that's ready and tested, and we'll
>> figure out where the upload should go.
> 
> Tagging as -can-defer as this can be fixed post-release if not ready
> soon enough.
> 
> Cheers,
> Julien

I sent a debdiff for review to team at s.d.o

Cheers,
Jérémy.