On Mon, 10 Aug 2009 20:24:10 +0200, Nico Golde wrote:
> Hi,
> * Michael S. Gilbert <[email protected]> [2009-08-10 20:18]:
> > On Mon, 10 Aug 2009 18:09:16 +0000, Nico Golde wrote:
> [...] 
> > > -CVE-2009-2414
> > > +CVE-2009-2414 [libxml2 stack recursion]
> > >   RESERVED
> > > + - libxml2 <unfixed> (medium; bug #540865)
> > > + [etch] - libxml <unfixed>
> > 
> > i thought <unfixed> tags for stable releases were discouraged?
> 
> Hmm. I wasn't pretty sure how to mark this. In this case 
> only etch contains libxml. Would be adding <removed> tags 
> for lenny and unstable (or is only lenny required in this 
> case) a better solution in this case? Florian?

i think you would want to do

- libxml <removed>
[etch] - libxml <no-dsa> (backport not feasible)

or something like that.

mike


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to