Bug#998907: closed by Håvard Flaget Aasen <haavard_aasen@yahoo.no> (Closing, CVE marked as unimportant)

[Håvard Flaget Aasen <haavard_aasen@yahoo.no>]

On Sun, 14 Nov 2021 09:02:25 +0100 Salvatore Bonaccorso
<carnil@debian.org> wrote:
> Hi Håvard,
>
> On Fri, Nov 12, 2021 at 11:21:08PM +0000, Debian Bug Tracking System wrote:
> [...]
> > CVE-2021-40985 has now been marked as unimportant, I'm therefore
> > closing this bug, since the CVE was the sole purpose of the update.
> >
> > Regards,
> > Håvard
>
> In case this was just caused by a uncertainity what is acceptable to
> fix via a point release and what not: I guess SRM will accept updates
> in stable as well for simpler bugfixes with low severity (even more if
> you had already prepared the debdiff as attached to this bug and as
> well #998902).
>
> Regards,
> Salvatore
>
>

For the most part it was uncertainty yes. If it's possible the upload
could still be approved I will begin with reopening the request for
bullseye with a new debdiff, fixing the newer CVE as well.

Thanks for the clarification.

Håvard