* Vincent Bernat:

> I think that this "inferiority" should be changed to equality in term
> of security. I suppose that __cmp__() in Version class could return 0
> when all the following conditions are met:
>  - upstream versions are equal
>  - debian versions of the package without r'~.*$' pattern are equal
> Otherwise, we just use return VersionCompare() result.

This doesn't work because "~" isn't really that special.  It's used by
maintainers as well, not just backports and testing-security.

Sorry, but the fix is more complex, and I'm not 100% sure what it would
look like.  It probably has to happen on the server side anyway.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to