Hi Chris, The part about the possible downgrade attack on get-upstream-version.pl seems worth addressing. The rest is quite vague to me, or applicable to the entire Debian repository, or already covered in the package. Or am I overlooking something essential here ?
Regards, Bart Martens -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
