Thijs Kinkhorst wrote: > Concluding: please prepare a package for stable with the two mentioned issues > fixed (please include relevant CVE id and bug numbers in the changelog) and > send us the debdiff for a last review. Then, if all is right, put the rest of > the changes into a new version and propose that to the SRM's.
That's not how it's handled typically. If all issues were harmless they can be shifted to a point release, but if there's a DSA anyway, such issues should rather be fixed along. Cheers, Moritz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]