Control: severity -1 important On Mon, 15 May 2023 21:17:15 +0300 Michael Tokarev wrote:
This was done in the latest cyrus-sasl2 package version. As RSA-MD was the strong offender and the case is not as clear cut for BSD-3-Clause-Attribution, I am lowering the severity.Also for the RSA-MD license (which has stronger attribution clause), the 4 files in cyrus-sasl which are covered by it should just be deleted and replaced with equivalent implementations which is done by everyone else.
