Package: lintian
Severity: wishlist
X-Debbugs-CC: security@debian.org
Please warn about the use of TEMP CVE identifiers in debian/changelog.
These identifiers are temporary and go away when CVEs are assigned so
they are not at all useful to record.
The regex is TEMP-\d{7}-\d{6} (case sensitive):
https://anonscm.debian.org/viewvc/secure-testing/lib/python/sectracker/parsers.py?view=markup#l262
Various folks make this mistake, some examples:
https://bugs.debian.org/807855
https://bugs.debian.org/799019
https://codesearch.debian.net/search?q=path:debian/changelog%20TEMP-
--
bye,
pabs
https://wiki.debian.org/PaulWise
Attachment:
signature.asc
Description: This is a digitally signed message part