* Thijs Kinkhorst <thijs@debian.org>, 2009-11-09, 20:56:
NOTE: embeds msgfmt.py script - - mailman <unfixed> (embed) + - mailman <unfixed> (embed; #555416)Although this is installed into the Debian package, it is never used and not installed into the path. What is the risk here? I can see to removing it in a next release purely because it's cruft, but do not see the added value of putting it on the embedded code copies list.
We are already documenting things that are no security risk at all (like stuff fixed way before etch) and I strongly believe that is the right thing to do. The whole point of this file is to make obvious which versions are affected (even if none actually are).
That said, this entry should be probably marked as <not-affected>. -- Jakub Wilk
Attachment:
signature.asc
Description: Digital signature