Re: security fix dependency
On Thu, Jul 29, 2004 at 11:41:37PM +0200, Laszlo 'GCS' Boszormenyi wrote:
> Dear Mentors,
>
> I have a seemingly stupid question. Say I am not a DD yet, and has a
> security bug in a package I help maintaining. Upstream fixed it, so the
> package is ready, but upstream requires new library version from a
> dependency than the current Debian version. Asked the library maintainer
Backport *just* the security fix into a new Debian revision. Upload the new
upstream version when the new version of the dependant library is ready.
If the problem is in some way related to the version of the library, then
that library possibly should have a security bug filed against it, which
would leave it open for a quick NMU if that's what's required to get it
fixed.
- Matt
Reply to: