On 28/05/13 10:33, Raphael Geissert wrote: > Hi, > > On 28 May 2013 10:12, Daniel Pocock <dan...@pocock.com.au> wrote: >> Instead of adding the README.Debian.security file proposed in the >> earlier patch, I could add a README.security file upstream - the >> security issue is not Debian-specific. However, I will mention in that >> file that the Debian security team were involved in analyzing the code >> and a reference to this bug. > Feel free to add a security notice upstream, but the > README.Debian.security file is to state that the Debian security team > is going to provide limited support. > As such, it should be kept in Debian.
I've now added in a revised version of the file and uploaded again Please note we use git to track this package and that is why the original patch was lost, I am happy for security team to commit fixes into the git VCS in future -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org