Michael Maurizi: > How about including changes to the version string and so on the next > time theres a security update for GIMP? Yes; when an Ubuntu package has fixes from upstream applied, that they've released in a new version with a bumped version number, the version number in Ubuntu should also be bumped to match.