Hi Salvatore, On Thu Aug 7, 2025 at 7:09 AM CEST, Salvatore Bonaccorso wrote:
My suggestion would be: make first a unstable upload with the targeted fix (maybe after saturday, given trixie release is just around the corner and we should not cause mor work to the release team). Once that is in, we can decide if cpp-httplib requires a DSA or a point release is enough.Samewise then for bookworm.
Is it ok if the upload fixing the CVEs isn't a backport but an update to the latest upstream release? I've already done so in experimental.
Thanks! Bye
signature.asc
Description: PGP signature
