On Wed, Nov 04, 2015 at 11:57:00AM -0600, Don Armstrong wrote: > > In this specific case, the specific set of changes which have been made, > coupled with documenting the policy of upstream for testing and making > changes to openssl would be a good start.
I've pointed to upstream's policy before, but the URL has actually changedin the mean time: https://www.openssl.org/policies/releasestrat.html I've also gave some information about testing that is happening in the stable branches at: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765639#110 I'm not sure what you mean with "specific set of changes which have been made". There have been more than 900 upstream commits since the 1.0.1e release that's in wheezy. Most of those are security issues being solved and bug reports that are getting fixed. Then there are lots of things we notice in the master branch that we also fix in the other branches like not checking return values, memory leaks, and so on. But there really is too much to get into details here I think and if you really want to know just look at the git commit messages. Kurt
