On Mon, 25 May 2020 at 00:55, Adam D. Barratt wrote:
Personally, it probably makes more sense for the new stretch version to
be +deb9u3, built on top of the already uploaded package (and similar
for buster) with a second release.d.o bug describing the new fixes.
You /can/ re-use the version if that would be preferable, as the
package is still in (old)stable-new right now, but that will require a
reject+reupload cycle, and presumably corresponding re-tag on the git
side.
Good to know, but by the sound of things, incrementing is going to cleaner and quicker.
I'm assuming that all of the fixes are either already present in
unstable, or aren't relevant there.
I was planning on releasing the new upstream release to fix the three outstanding CVEs. Would you prefer a final release of the old version instead?
Thanks,
Hugh