On Fri, 14 Jun 2024 at 23:14:38 +0200, Salvatore Bonaccorso wrote:
> Hi stable release managers, CC'ing Simon
Thank you for following up on this. I don't intend to have any sort of
ownership over this package other than being a member of the GNOME team
(you'll notice I haven't added myself to its Uploaders), and I certainly
don't want to make myself a blocker or a single point of failure for it.
I believe Jeremy Bicha got part way through preparing equivalent(?)
updates for bookworm and bullseye by importing patches from Ubuntu,
so please coordinate with him?
The proposed changes look reasonable to me, and I agree that backporting
all of the .ani hardening changes is safer than just the one that fixes
a known vulnerability (that seems to match what Ubuntu did, too).
smcv
