Re: [debian-lts] libvncserver package
Hello Nguyen,
Sorry for the delay, this update fell through the cracks. Don't hesitate
to ping us when we don't respond in a timely fashion.
On Mon, 19 Jan 2015, Nguyen Cong wrote:
> I would like to send debdiff of libvncserver package for reviewing.
>
> Could any one please review it and give me some comments.
The update was mostly fine, I released it.
Did you base your work on the patches that have been released in the
wheezy update?
I wonder because the patches seem to have identical long descriptions but
have small differences in the meta-data and in one case you seem to have
bundled related hardening changes that were not included in the wheezy
update.
In general, we tend to reuse the work done by the security team when
they have already released a fixed version for stable. And when we diverge
from what they did, it's a good idea to document it in the changelog.
Cheers,
--
Raphaël Hertzog ◈ Debian Developer
Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Reply to: