Hi Gudio, On Sun, Sep 27, 2015 at 10:17:14AM +0200, Guido Günther wrote: > Hi, > > for the glibc update I'm preparing three issues that don't have a CVE > assigned yet so they can't be marked as resolved via the entry in > data/DLA/list. Is the correct way to tag these by just adding: > > [squeeze] - eglibc 2.11.3-4+deb6u7 > > to the entries in data/CVE/list after the upload?
yes, but please as well ad a note so that once the CVE is assigned, the entry is moved to the correct data/{DSA,DLA}/list. Something like (no rule, but makes it easier to update once CVE assigned): > NOTE: Added workaround entry for DSA-XXXX-1/DLA-XXX-1 until CVE > assigned. Regards, Salvatore