questions on the CVE patches

[Matt Mackall]

On Wed, 2016-03-30 at 14:39 +0200, Julien Cristau wrote:
> Hi,
> 
> I'm working on backporting yesterday's patches to Debian's supported
> releases, and have a couple questions.

(lost in my inbox, sorry)

> Finally, my head hurts at backporting
> https://selenic.com/hg/rev/b9714d958e89 past
> https://selenic.com/hg/rev/09e41ac6289d.  Is the following correct?
> Should I give up and just cherry-pick that earlier patch?

Yes, those fixes are also security-sensitive.

--Â 
Mathematics is the supreme nostalgia of our time.