[Pkg-salt-team] salt autoremoval 2021-Apr-25 WAS: Debian Bugs information: logs for Bug#985085

[Federico Grau]

Hello again,

fyi - I had a chance to look over #985085, and agree with carnil that this
does not apply to the Debian salt package and may be closed.  I'll leave it
open for a some days allowing for feedback.  My detailed review is in the bug
post.  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985085

regards,
donfede


On Thu, Mar 25, 2021 at 09:46:10PM -0400, Federico Grau wrote:
> 
> Hello salt neighbors,
> 
> Checking if there was any planned direction to avoid the autoremoval of salt
> next month, because of bug #985085?
> 
>     https://tracker.debian.org/pkg/salt
> 
> 
> I'm mostly a salt user/admin, but will plan to spend some time this coming
> weekend reviewing the suggested CVE, and try to discern if it is suse specific
> or not.  Is posting findings to the bug sufficient or is something else
> required?  If I find the bug is not applicable, am I allowed to close it (with
> findings)?
> 
> regards,
> donfede
> 
> 
> On Fri, Mar 26, 2021 at 01:15:03AM +0000, Debian Bug Tracking System wrote:
> >                         Debian Bug report logs - #985085
> >                               salt: CVE-2021-25315
> > 
...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-salt-team/attachments/20210328/89fd17ca/attachment.sig>