[Pkg-sass-devel] Bug#921952: Bug#921952: Don't include in buster without proper commitment to update in stable

[Jonas Smedegaard]

Quoting Aljoscha Lautenbach (2019-04-16 22:27:47)
> > @Aljoscha: Thanks for your initial work and - more so - for 
> > committing to help generally looking after these security issues in 
> > libsaass.
> 
> > Due to the expansion of the libsass team with Aljoscha, I am 
> > lowering severity of this bugreport.
> 
> Just in case that was not clear in my initial message, that is indeed 
> the intention. On any given week I can spend 0.5 to 4 hours on this, 
> so this will not be an instantaneous change, but a slow and steady 
> effort.
> 
> I have continued to update the little CVE table I sent earlier, and I 
> will start to update and file bugs accordingly soon (where "soon" ~= 3 
> weeks, due to upcoming vacation).

Great.  Thanks!

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-sass-devel/attachments/20190417/22426364/attachment.sig>