[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Secure-testing-commits] r9775 - data/CVE



Hi Steffen,
* Steffen Joeris <steffen.joeris@skolelinux.de> [2008-09-09 18:10]:
> On Mon, 8 Sep 2008 09:14:28 pm Thijs Kinkhorst wrote:
> > On Mon, September 8, 2008 13:09, white@alioth.debian.org wrote:
> > > Regression fixed in wordnet
> > >
> > > -	- wordnet 1:3.0-12 (medium; bug #497441)
> > > +	- wordnet 1:3.0-13 (medium; bug #497441)
> >
> > Since the regression doesn't have security implications, wouldn't it be
> > more accurate to keep the fixed-version at 1:3.0-12?
> I thought about it as well, but if I recall correctly, we have always treated 
> regressions (also the ones that just introduced normal bugs) like this.
> But I might be off here, so if you are sure go ahead and revert it.

I disagree, as I already wrote in the bug report 1:3.0-12 
includes all security fixes and I don't think we should 
track issues in corner case use cases as they might pop out 
way later than the issue was fixed.

Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpy8IXHzP3jX.pgp
Description: PGP signature


Reply to: