Re: Bad press again...

[Florian Weimer <fw@deneb.enyo.de>]

* Paul Gear:

> There certainly have been exceptions to that rule.  The maintainer of
> shorewall has been trying for weeks to get a DSA issued about a
> vulnerability, and it seems we have to convince Joey that it *is* a
> vulnerability before he'll issue it.  

Is this #318946?  This one is tagged sarge, but it's been closed by
Joey Hess, but probably for testing only.

> (I don't understand this - how can Joey even *try* to understand
> every security bug?)

Part of "stable" means avoiding unnecessary and potentially harmful
changes.  Clear policies could help to avoid such misunderstandings.