Re: CAN to CVE: changing changelogs?
On Thu, 27 Oct 2005, Henrique de Moraes Holschuh wrote:
> On Thu, 27 Oct 2005, Joey Hess wrote:
> > Henrique de Moraes Holschuh wrote:
> > > 3. The security team's work is helped by adding the CVE
> > > information to the proper changelog entry, to the point that
> > > they have requested everyone to do so. This requires editing
> > > past changelog entries quite often.
> >
> > I don't think that the security team has ever requested retoractive
> > changing of changelogs for CVE entries. I find it hard to envision a
>
> THAT will give me a lot of work to track down. This was pre BTS-usertags,
Found it. From: Martin Schulze <joey@infodrom.org>, Message-ID:
<20041124100730.GF7329@finlandia.infodrom.north.de>, and Message-ID:
<20041129185017.GA25751@finlandia.infodrom.north.de> at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=282681
I was out of line on claiming that the security team asked everyone to add
CAN/CVE numbers to past changelog entries. There were _two_ requests from
Martin Shulze directed to me, while wearing his security team hat, to change
past entries in a changelog to add CAN/CVE entries, but that's it.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: