reopen 409703
thanks

On Thu, Mar 01, 2007 at 03:57:51PM +0100, Raphael Hertzog wrote:
> On Wed, 28 Feb 2007, Moritz Muehlenhoff wrote:
> > We talked about this before in private mail. Please either

> > a) Document clearly in README.Debian that sql-ledger is not suitable
> > for public installations w/o completely trusted users (which could even
> > in ordner for an accounting solution) and readjust to non-RC severity
> > afterwards

> I've done that but I closed the bug, so that its progression in etch can be
> properly tracked. We ought to reopen it once it's in etch.

Please don't do this, it subverts the intent of version-tracking.

Instead:

- If you consider this to be two separate bugs, one about the documentation
  issue and one about the actual security holes, where only the
  documentation one is to be considered RC, please split the bug, adjust the
  severities, and close only the documentation bug in this version.
- If you consider this to be a single bug, please leave it open.  In that
  case, I suppose the current severity is still the wrong one, and it should
  be lowered?

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
[EMAIL PROTECTED]                                   http://www.debian.org/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to