[Pkg-cyrus-sasl2-commits] r433 - in /cyrus-sasl-2.1/branches/heimdal/debian: changelog repack.sh watch

[Roberto C. Sánchez]

On Fri, May 22, 2009 at 07:49:32PM +0300, Fabian Fagerholm wrote:
> On Thu, 2009-05-21 at 14:53 -0400, Roberto C. Sánchez wrote:
> > Sorry about the delay, I've been utterly swamped.
> > 
> > I need a sanity check on this.   The 2.1.23 release was *only* to fix
> > the announced CVE, correct?
> 
> 
> Correct, there were no other changes from 2.1.22.
> 
Then I am curious as to what the "right" way to handle this is.  Do we
still have to patch the current stable version to version
2.1.22.dfsg1-23lenny1, or can we request inclusion of the new 2.1.23
package?  I guess the problem with the latter approach is that the
packaging changes (in -24 and -25) might not be suitable for inclusion
in a stable update.

Other than that, the new 2.1.23 can just be uploaded to unstable,
especially if we are not requesting its inclusion in stable.  Right?

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20090523/b2d7b4cf/attachment.pgp>