Bug#484269: Policy 2.5 disagrees with you
"Moore, Joe" <joe.moore@siemens.com> writes:
>> Russ Allbery <rra@debian.org> writes:
>> I spoke too soon -- I shouldn't have taken your word for the priority
>> of openssh-blacklist. It's already priority: optional. So nothing to
>> fix here.
>
> Has this changed since stable? On my freshly-installed 4.0r3 system:
>
> media2:~# aptitude show openssh-blacklist
> Package: openssh-blacklist
> State: installed
> Automatically installed: yes
> Version: 0.1.1
> Priority: extra
> Section: net
> Maintainer: Kees Cook <kees@outflux.net>
> Uncompressed Size: 4194k
> Recommends: openssh-client
> Description: list of blacklisted OpenSSH RSA and DSA keys
> Contains the list of known-bad OpenSSH keys, for ssh-vulnkeys to use
> when
> examining suspect keys.
It must have -- my guess is that the security update went in with
priority: extra, but unstable has it correct.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: