[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: wolfssl_5.2.0-2~bpo11+1_amd64.changes REJECTED



Hi,

On Wed, Feb 23, 2022 at 2:00 AM Alexander Wirt
<debian-backports@lists.debian.org> wrote:
>
> Not in testing

Fixing two grave CVEs qualifies as an "expedient exception". [1] The
FAQ says "When security related bugs are fixed in Debian unstable the
backporter is permitted to upload the package from directly there
instead of having to wait until the fix hits testing." [2]

The CVEs are not mentioned in the upload for unstable because they
were assigned later yesterday, but both CVEs are mentioned in the
upload to backports. Did you read the changelog?

For background, upstream contacted me for this upload (and all the
others) because the release fixes two grave CVE. Both were embargoed
until yesterday.

Please admit version 5.2.0-2 into backports without further delay. Thanks!

Kind regards
Felix Lechner

[1] https://backports.debian.org/Contribute/
[2] https://backports.debian.org/FAQ/


Reply to: