Hi François, On Sat, 14 Mar 2015, François-Régis wrote: > Do you think, in between, it's worth to make a package which remove the > upstream embedded ZendDB and embed a proper (let says 2.3.6) version of it.
Yes, or alternatively apply only the security relevant patches that David mentioned. But you need to act quickly as we are in deep freeze and galette is a leaf package that can quickly go away... Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org