1.53 should be merged

[Charles Kerr]

Binary package hint: transmission

Since 9.04 is using the Transmission 1.5x series, it should be updated to use 1.53, which was released today.

1.53 only has two changes from 1.52. One is a minor locale fix in the JSON parser, but the other closes a potential CSRF security hole for users who access Transmission via a web browser.

Thanks for your consideration.

[Charles Kerr (charlesk)]

This has been in progress for two months now.

It's my understanding that some of the holdup is because there are changes between 1.51 and 1.53 that focus on, for example, indentation cleanup rather than pure bug fixes.

Is there anything upstream can do to make the 1.51 -> 1.53 jump easier to swallow?

As an aside, 1.53 has had some burn-in time for Mac OS X 10.4 users... 1.60 and above require OS X 10.5.

[Charles Kerr (charlesk)]

Oops, 1 month != 2 months :)

[Marc Deslauriers (mdeslaur)]

This CVE is marked "low" in our CVE tracker, which means we'll usually wait until there is a more serious issue before releasing security updates.

That being said, if someone attaches a debdiff containing a backported patch, we'll gladly sponsor it.

[Charles Kerr (charlesk)]

Closing since 9.04 has reached EOL

[Vish (vish)]

Fully closing the bug.. :-)