[Secure-testing-team] adding TEMP items to the tracker list
Micah Anderson
micah at riseup.net
Tue Oct 2 20:47:24 UTC 2007
* Florian Weimer <fw at deneb.enyo.de> [071002 13:01]:
> * Nico Golde:
>
> > looking at
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982
> > which seems to be a valid security flaw, how do I add this
> > to the tracker that it will be displayed as TEMP-XXX...
> > item?
>
> Use "CVE-2007-XXXX" and put the description in brackets ("[]").
These TEMP-XXX... entries should really only be used as placeholders
while genuine CVE entries are being requested. We have far too many
TEMP entries that never turn into CVEs and the original reasoning why
they are issues are never logged properly.
micah
More information about the Secure-testing-team
mailing list