Re: question about RC bugs on small packages

[Christian Perrier <bubulle@debian.org>]

Quoting Allan Lyons (allan@rahab.wycliffe.ca):
> Hi,
> 
> Not having been around Debian long enough to have seen a complete
> release cycle, I have a question.  What should happen to packages
> that have RC bugs filed against them (fixed upstream) that nothing
> else depends on if the maintainer hasn't dealt with it within a
> "reasonable" period of time?
> 
> 1) removed from testing (drop from Sarge)
> 2) someone else updates the package
> 3) Sarge releases with this security bug
> 4) ?????


if not 2) then 1)

4) would be backporting the security fix to the current version. This
mostly depends on the changes induced by the new version besides the
security fix.