Secure testing team - Jun 2008 - Tracking based on binary package names

Do we need this functionality?

I''m working on some tracker improvements, and the (limited) ability to
track CVEs based on binary packages makes progress rather difficult.

On Mon, Jun 02, 2008 at 07:24:22PM +0200, Florian Weimer
wrote:
> Do we need this functionality?
> 
> I''m working on some tracker improvements, and the (limited)
ability to
> track CVEs based on binary packages makes progress rather difficult.
I don''t think we need it at all, tracking by source package name is
completely sufficient.

Cheers,
        Moritz

* Moritz Muehlenhoff:
>> I''m working on some tracker improvements, and the (limited)
ability to
>> track CVEs based on binary packages makes progress rather difficult.
>
> I don''t think we need it at all, tracking by source package name
is
> completely sufficient.
Great.  There are about 130 instances of binary package names in
CVE/list, that''s why I asked.  I will migrate them to source package
names.

Hi Moritz,
* Moritz Muehlenhoff <jmm at inutil.org> [2008-06-02
19:43]:
> On Mon, Jun 02, 2008 at 07:24:22PM +0200, Florian Weimer wrote:
> > Do we need this functionality?
> > 
> > I''m working on some tracker improvements, and the (limited)
ability to
> > track CVEs based on binary packages makes progress rather difficult.
> 
> I don''t think we need it at all, tracking by source package name
is
> completely sufficient.
Same here, never used this feature so far.
Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20080602/a133bcbe/attachment.pgp