Really, the only sane method here is to place 0.6.2 in hardy-security. Backporting the fixes introduces a fairly major regression, and anything other than an upstream-vetted change to allocation is begging for disaster.
Really, the only sane method here is to place 0.6.2 in hardy-security. Backporting the fixes introduces a fairly major regression, and anything other than an upstream-vetted change to allocation is begging for disaster.