On Thu, 23 Jul 2026 20:07:48 +0200 Bastian Germann <[email protected]> wrote:
... You should isolate the
CVE fixes as patches and add them as quilt patches to the 3.10.2-1
version resulting in a 3.10.2-1+deb13u1 trixie proposed update request.
Upstream also added/changed the test suite to accommodate or test for
the fixed bugs. See [link to github]. Should those be included in a PU?
@Codin: Are you interested in submitting a PU? If not, then I'm willing
to have a poke at it.
Kind regards,
Edmund
[link to github]:
https://github.com/cyrusimap/cyrus-imapd/compare/cyrus-imapd-3.10.2...cyrus-imapd-3.10.3
--
Edmund Lodewijks <[email protected]>
TZ: UTC+2 / GMT+2
