[Secure-testing-team] adding TEMP items to the tracker list

Micah Anderson micah at riseup.net
Tue Oct 2 20:47:24 UTC 2007


* Florian Weimer <fw at deneb.enyo.de> [071002 13:01]:
> * Nico Golde:
> 
> > looking at 
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982 
> > which seems to be a valid security flaw, how do I add this 
> > to the tracker that it will be displayed as TEMP-XXX... 
> > item?
> 
> Use "CVE-2007-XXXX" and put the description in brackets ("[]").

These TEMP-XXX... entries should really only be used as placeholders
while genuine CVE entries are being requested. We have far too many
TEMP entries that never turn into CVEs and the original reasoning why
they are issues are never logged properly.

micah



More information about the Secure-testing-team mailing list