Please ensure an RC bug is open when DSA fixes are missing in testing/unstable

[Adrian Bunk <bunk@stusta.de>]

Many DSA's contain "For the unstable (sid) and testing (wheezy) 
distribution, this problem will be fixed soon."

When there is an unfixed version in testing and/or unstable, please 
ensure an RC bug is open. Otherwise there is the possibility that
a new Debian release might ship with vulnerabilities that were fixed 
through a DSA in a previous Debian release.

This is not only a theoretical problem since it sometimes takes months 
after a DSA until a fix is available in unstable.

Thanks in advance
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed