Processed: Re: Bug#718315: Please reduce severity of bug

2014-10-08 Thread Debian Bug Tracking System
Processing control commands: > severity -1 important Bug #718315 [xalan] xalan: With recursive xsl:call-template, xalan makes the whole system freeze Severity set to 'important' from 'grave' -- 718315: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718315 Debian Bug Tracking System Contact ow

Bug#718315: Please reduce severity of bug

2014-10-08 Thread Vincent Lefevre
Control: severity -1 important Reducing the severity because XSLT can be regarded as a general programming language, and not all programming language implementations are protected against infinite recursion anyway. On 2014-10-07 08:55:46 -0700, Andrew Ayer wrote: > Dear Maintainer, > > I do not

Bug#718315: Please reduce severity of bug

2014-10-07 Thread Andrew Ayer
Dear Maintainer, I do not believe that this bug constitutes a security vulnerability or that it deserves grave severity. To be exploited remotely, you have to execute an untrusted XSLT stylesheet, which is similar to executing untrusted arbitrary code, and is a bad idea for reasons much more seve