Christoph Martin wrote:
> How should I fix it in the source package? They are supposed to be the
> unchanged archives from upstream. I could however include a fix in the
> diff. But that will not prevent anyone from using the upstream source.
> But if a fixed upstream version is released I will release it for Debian.
Fixing it in the diff would be fine, that'd how we typically fix
security problems after all. Or just forward it upstream and let them
fix it there.
Christoph Martin wrote:
> How should I fix it in the source package? They are supposed to be the
> unchanged archives from upstream. I could however include a fix in the
> diff. But that will not prevent anyone from using the upstream source.
> But if a fixed upstream version is released I will release it for Debian.
Fixing it in the diff would be fine, that'd how we typically fix
security problems after all. Or just forward it upstream and let them
fix it there.
--
see shy jo