[Secure-testing-team] [Secure-testing-commits] r12161 - data/CVE

[Michael S. Gilbert]

On Fri, 19 Jun 2009 09:09:05 +0000, Giuseppe Iuculano wrote:
> Author: derevko-guest
> Date: 2009-06-19 09:09:04 +0000 (Fri, 19 Jun 2009)
> New Revision: 12161
> 
> Modified:
>    data/CVE/list
> Log:
> Reverted changes in packages accepted in stable/oldstable. Those entries have to be changed 
> when the stable/oldstable update has actually been released, and not when a package is accepted in
> stable/oldstable. Sorry for the trouble.

i don't see the need for this reversion.  if the tracker has these new
versions, which have not yet entered the archive, then it does not mark
the older version (that's still in the archive) as fixed or anything
that would be confusing or incorrect. in fact, i think that it is more
useful to track the fixed version whether or not it has entered the
archive yet.

maybe i've missed something?  what is the philosophy behind this
decision?

mike