Re: lowering severity of bugs not tracked by release team
On Sun, Dec 21, 2014 at 9:11 AM, Bálint Réczey wrote:
>> The problem still remains that the backlog of libv8 security issues
>> never get fixed (except for a new upstream every now and then), so
>> treating this one as RC but not the others is rather inconsistent:
>> https://security-tracker.debian.org/tracker/source-package/libv8
>> https://security-tracker.debian.org/tracker/source-package/libv8-3.14
>
> If there were bugs opened for those CVE-s those should have been
> opened with grave severity, too.
Here you go:
http://bugs.debian.org/773671
Good luck!
Best wishes,
Mike
Reply to: