Bug#992748: systemd-cron: postinst error - CVE-2017-9525?

Salvatore Bonaccorso carnil at debian.org
Wed Sep 8 11:33:29 BST 2021


Hi

On Wed, Sep 08, 2021 at 01:12:44PM +0300, Martin-Éric Racine wrote:
> Alexandre,
> 
> Thanks for fixing unstable.
> 
> Unless I'm mistaken, I think that the second bug was intentionally
> cloned by Chris to track the issue in stable and oldstable. I'm thus
> not sure if it was meant to be closed via the same upload.

I actually cloned it for tracking the CVE specifically, but TBH and
retrospectively it was probably just "overklill" it is the same fix
for both apsects anywaay.

It is not a problem to close it, the BTS can handle closes in mutliple
versions, and is actually the right thing to do (by mentioning it in
the changes). This is because BTS has the version tracking so knows
which versions are still affected for other suites. That means the
stable and oldstable upload would both contain as well the closes
marker and can close similarly the bug.

Regards,
Salvatore



More information about the Pkg-systemd-maintainers mailing list