[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Please ensure an RC bug is open when DSA fixes are missing in testing/unstable

Many DSA's contain "For the unstable (sid) and testing (wheezy) 
distribution, this problem will be fixed soon."

When there is an unfixed version in testing and/or unstable, please 
ensure an RC bug is open. Otherwise there is the possibility that
a new Debian release might ship with vulnerabilities that were fixed 
through a DSA in a previous Debian release.

This is not only a theoretical problem since it sometimes takes months 
after a DSA until a fix is available in unstable.

Thanks in advance


       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

Reply to: