On Sat, Oct 19, 2013 at 04:06:06PM +0200, Ansgar Burchardt wrote:
> Package: chrony
> Severity: serious
> Version: 1.24-3+squeeze1
> X-Debbugs-Cc: t...@security.debian.org, debian-rele...@lists.debian.org
>
> The security update for chrony links against libreadline6 on
> amd64. However chrony is licensed under GPL-2-only and libreadline6 is
> GPL-3-or-later.
>
> The buildd uploads still link against libreadline5 (GPL-2+). So it looks
> like the amd64 version was built in an unclean environment.
>
> So chrony needs either
> a, a binNMU on amd64 for the next point release, leaving the current
> version on security.d.o, or
We should trigger a binBMU for amd64.
Cheers,
Moritz
--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20131020161020.GA4438@pisco.westfalen.local
