* Paul Gear:

> There certainly have been exceptions to that rule.  The maintainer of
> shorewall has been trying for weeks to get a DSA issued about a
> vulnerability, and it seems we have to convince Joey that it *is* a
> vulnerability before he'll issue it.  

Is this #318946?  This one is tagged sarge, but it's been closed by
Joey Hess, but probably for testing only.

> (I don't understand this - how can Joey even *try* to understand
> every security bug?)

Part of "stable" means avoiding unnecessary and potentially harmful
changes.  Clear policies could help to avoid such misunderstandings.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to