On Fri, Dec 30, 2022 at 12:33:34PM +0100, Tobias Frost wrote: > (as announced in #1018191) I've tried to packasge 2.17 to address > the CVE. I've rebuilt all reverse depencies successfully (except lua-apr, > which was alredy broken before, #935271) > > I've prepared an NMU for libapreq2 (versioned as 2.17-0.1) and > uploaded it to DELAYED/15. Please feel free to tell me if I > should delay it longer or if I should accelerate it.
Just a few comments: - Please set maintainer to Debian QA Group, orphaning the package. - I don't think it's a good idea to modify old changelog entries. - Apart from that, there's no need to delay the NMU. /* Steinar */ -- Homepage: https://www.sesse.net/
