Le 26/05/2019 à 23:51, tony mancill a écrit : > For the update to buster via testing-proposed-updates, I have prepared > 11.0.3+7-4+deb10u1, which is simply your 11.0.3+7-4 package [2] targeted > at buster via t-p-u and with the changelog updated to note that 11.0.3+7 > is the GA release from OpenJDK. This will address the CVEs currently > open against the version in buster.
Is the +deb10u1 suffix necessary for a testing-proposed-updates upload? Just asking, because if I backport that for stretch that will make a not very nice 11.0.3+7-4+deb10u1~bpo9-1 version. Would 11.0.3+7-5 work? Emmanuel Bourg