[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#220486: Acknowledgement (perl-suid: suidperl security)



On Tue, Feb 17, 2004 at 03:31:26PM +1100, Paul Szabo wrote:
>>> Who/what is "upstream": perl5-porters, or the Debian maintainer? I still
>>> hope to get somewhere with perl5-porters; the patches I submitted to
>>> #203426 and #220486 are "proper" (so maybe permanent).
>> 
>> I'm not familiar with perl5-porters, but if they are the folks who decide
>> what goes into the version of Perl that is the source for Debian and other
>> vendors' perl packages, then yes, they are upstream.
>
>That is right: perl5-porters is upstream from Debian. I find it puzzling
>that Debian has used "known broken" patches (over and above the "upstream"
>code), instead of the "proper" ones.

I'm rather confused by this assertion.

Please clarify exactly which "known broken" patches have been applied,
and additionally provide the upstream change number of the "proper"
ones.

--bod



Reply to: