Re: [SRM] krb5 changelog missing CVE

[Sam Hartman <hartmans@debian.org>]

>>>>> "Florian" == Florian Weimer <fw@deneb.enyo.de> writes:

    Florian> * Sam Hartman:
    >> Florian Weimer noticed that the krb5 changelog in squeeze was
    >> missing a CVE that was fixed in the patch applied.  He proposes
    >> to make a new upload that corrects the changelog so that people
    >> who track security issues from the changelog will find the fix:

    Florian> Sorry, there seems to be a slight misunderstanding.  The
    Florian> changelog was indeed incorrect, but even that upload never
    Florian> made it to the archive.

I thought the issues were already fixed in squeeze2.
I thought the only question was the changelog entry and documenting the
issues.