Hey Russell, how's it going with this? I notice you've already tagged an upload in the git repo:
https://anonscm.debian.org/cgit/collab-maint/libgit2.git/tag/?h=debian/0.25.1-1 Is there anything else that needs to be done before the upload? I'm here to help, if you need. I've actually already built this tag locally, and have been using it to build cargo with. It works well from that perspective at least. Ximin Russell Sim: > Hi, > > Sure thing, I'll take a look tonight. Yeah, I agree it's been a bit too > long, and I apologise for that. > > On 20 April 2017 at 10:37, Ximin Luo <infini...@debian.org> wrote: > >> Source: libgit2 >> Version: 0.24.5-1 >> Followup-For: Bug #857068 >> >> Hey, this would be useful for the cargo package. (see #860116) >> >> At the moment we have to embed libgit2 0.25.1 in the cargo source package, >> this >> is not ideal for Debian especially given that there was already a CVE and >> it's >> not obvious to the security team that they would also need to patch cargo. >> >> X >> >> -- System Information: >> Debian Release: 9.0 >> APT prefers testing >> APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, >> 'testing-debug'), (500, 'buildd-unstable'), (300, 'unstable'), (100, >> 'experimental'), (1, 'experimental-debug') >> Architecture: amd64 (x86_64) >> Foreign Architectures: i386 >> >> Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores) >> Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) >> Shell: /bin/sh linked to /bin/dash >> Init: systemd (via /run/systemd/system) >> > > > -- GPG: ed25519/56034877E1F87C35 GPG: rsa4096/1318EFAC5FBBDBCE https://github.com/infinity0/pubkeys.git
