Re: [Secure-testing-commits] r12552 - data/CVE
On Mon, 10 Aug 2009 20:24:10 +0200, Nico Golde wrote:
> * Michael S. Gilbert <firstname.lastname@example.org> [2009-08-10 20:18]:
> > On Mon, 10 Aug 2009 18:09:16 +0000, Nico Golde wrote:
> > > -CVE-2009-2414
> > > +CVE-2009-2414 [libxml2 stack recursion]
> > > RESERVED
> > > + - libxml2 <unfixed> (medium; bug #540865)
> > > + [etch] - libxml <unfixed>
> > i thought <unfixed> tags for stable releases were discouraged?
> Hmm. I wasn't pretty sure how to mark this. In this case
> only etch contains libxml. Would be adding <removed> tags
> for lenny and unstable (or is only lenny required in this
> case) a better solution in this case? Florian?
i think you would want to do
- libxml <removed>
[etch] - libxml <no-dsa> (backport not feasible)
or something like that.