In message <20050510180513.GA16340@netmeister.org>, Jan Schaumann writes:
>
>
>"Steven M. Bellovin" <smb@cs.columbia.edu> wrote:
>=20
>> But they aren't always there.  For example, for a while -- a few weeks, I
>> think -- the head has had a fixed ImageMagick, 6.2.2.0.  But pkgsrc-2005Q1
>> has 6.2.0.4, which has a heap overflow.  I've seen other examples in=20
>> the past.
>
>Whenever this happens and you notice it, please send a message to the
>developer who committed the fix to pkgsrc HEAD to request a pullup.
>Developers should do so anyway, but it's easy to forget, and without
>pullup requests, pkgsrc-releng can't, well, pull up the change.


As a metanote, it would be really good to have a page on "how to get 
the project to do X", for many values of X.  Sometimes, when there's a 
missing feature or package, the right answer is "do you have the time?" 
But when it's something like a pull-up or an old version of some 
software in pkgsrc or what have you, it isn't clear.  "Send a PR" is 
another good answer, but it's no always the right one.

		--Prof. Steven M. Bellovin, http://www.cs.columbia.edu/~smb