Control: severity -1 normal

On Tue, 2018-11-13 at 22:54 +0100, Hilko Bengen wrote:
> Package: release.debian.org
> Severity: grave

RC bugs in psuedo-packages / teams generally don't make much sense. (On
the whole, anything > normal against release.d.o is likely to be
wrong.)

> Tags: stretch
> 
> A few weeks ago I reported that a security patch in
> opensc/0.16.0-3+deb9u1 broke support for Yubkey NEO devices (#910786,
> severity serious). Unfortunately, this did not prevent opensc from
> being included in the recent stretch point release.

Indeed, because no-one reported it to us. (No, filing an RC bug doesn't
count as notifying SRM, I'm afraid.)

> What can we do to fix the package now?

Firstly, one needs to identify whether the same issue affects the
package in unstable.

Once it's been confirmed that unstable is no{t, longer} affected,
someone should produce a fixed package and open a p-u bug to document
uploading that to proposed-updates.

Regards,

Adam

Reply via email to