Commit ec2c6d04 authored by Salvatore Bonaccorso's avatar Salvatore Bonaccorso

Add section about issues not warranting an advisory

git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@54594 e39458fd-73e7-0310-bf30-c45bca0a0e42
parent 622b6cef
......@@ -342,6 +342,23 @@ Packages which are not anymore supported by the security team in a
- ffmpeg <removed>
- ffmpeg-debian <end-of-life>
### Issues not warranting a security advisory
This states are reserved to be used for the respective security team.
Sometimes an issue might not warrant an (immediate) security advisory since for
example an issue might be minor. When a issue does not warrant an advisory they
are marked with a distribution tag, the `<no-dsa>` state and an explanation.
Two sub-states exists: `<ignored>` and `<postponed>`.
If an issue will further be ignored the <ignored> state is used.
If an issue deserves an update via a security advisory, but it is not needed to
release an advisory just because of this issue, rather than `<no-dsa>` the
`<postponed>` state can be used. This state can as well be used, if a fix is
already queued up for a future security advisory and it will be included in
such.
### `NOTE` and `TODO` entries
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment