[Python-modules-team] Bug#907298: CVE-2018-15869

[Moritz Muehlenhoff]

On Thu, Oct 18, 2018 at 10:24:44AM +0200, Moritz Muehlenhoff wrote:
> On Thu, Oct 18, 2018 at 04:01:11PM +0800, Shengjing Zhu wrote:
> > On Thu, Oct 18, 2018 at 08:54:51AM +0100, Ian Campbell wrote:
> > > On Thu, 2018-10-18 at 11:48 +0800, Shengjing Zhu wrote:
> > > > Package: awscli
> > > > Followup-For: Bug #907298
> > > > 
> > > > The corresponding bug on Redhat is closed as
> > > > 
> > > > > Closing this bug as NOTABUG and asked MITRE for rejection, since the issue
> > > > > does not seem to be in AWS CLI but in Packer.
> > > > 
> > > > Can we downgrade this bug and keep awscli in buster?
> > > 
> > > Not sure why I was cc-d on this, perhaps you got the wrong person?
> > > 
> > > In any case I've no idea what the correct response is here.
> > > 
> > > Ian.
> > > 
> > 
> > Oh, sorry for the noise. I meant to cc the bug submitter, Moritz.
> 
> If the maintainer can confirm that this doesn't affect awscli as packaged
> in Debian, then simply close the bug.

Or given that packer is in the archive, rather reassigned.

Cheers,
        Moritz