On Tue, May 21, 2019 at 10:01:55AM +0200, Aljoscha Lautenbach wrote: > Hi, > > On Mon, 20 May 2019 at 23:11, Moritz Mühlenhoff <j...@inutil.org> wrote: > > What's considered needed is that someone should actually look through > > https://security-tracker.debian.org/tracker/source-package/libsass and > > triage/fix. > > > > The only visible action done in five weeks was to lower the severity, so > > I'm reverting to RC status until there's some actual work happening. > > I'm sorry, I have been very busy since I got back from vacation. I certainly > see your point, I will try to show some visible progress by next week.
Great! There's also a MR on salsa, so make sure to prevent duplicated work: https://salsa.debian.org/sass-team/libsass/merge_requests/1 Cheers, Moritz
