Re: tracking security issues without CVEs

2016-03-10 Thread Paul Wise
On Fri, Mar 11, 2016 at 3:49 AM, Moritz Mühlenhoff wrote: > On Sun, Mar 06, 2016 at 06:58:48PM +0100, Salvatore Bonaccorso wrote: > >> But I think as well that is right now to early to >> start adopting these for not yet assigned issues. > > Agreed, let's stick with the usual "file a bug to get a t

Re: tracking security issues without CVEs

2016-03-10 Thread Moritz Mühlenhoff
On Sun, Mar 06, 2016 at 06:58:48PM +0100, Salvatore Bonaccorso wrote: > But I think as well that is right now to early to > start adopting these for not yet assigned issues. Agreed, let's stick with the usual "file a bug to get a temporary identifier" procedure for now. Cheers, Moritz

Re: [SECURITY] [DSA 3511-1] bind9 security update

2016-03-10 Thread Adel
Fred, La démarche à suivre : * Voir si le paquet en question est un paquet qui nous concerne : OUI * Voir si la distribution en question nous concerne : OUI * Voir la version dans laquelle le bug a été corrigé : 9.8.4.dfsg.P1-6+nmu2+deb7u10 * Notre version a nous :je n'arrive pas à trou