[pkg-lxc-devel] Bug#988730: CVE-2017-18641

[Mathias Gibbens]

Control: tags -1 + wontfix

  lxc-templates is essentially deprecated upstream in favor of
distrobuilder. From the launchpad discussion:

On 2020-02-05, Stéphane Graber wrote:
> Back in LXC 3.0 we moved the legacy template scripts to their own
> repository at https://github.com/lxc/lxc-templates and they are now
> community maintained without security/lts commitments on them on our
> side. Ubuntu still ships lxc-templates but it does so in universe
> rather than main, matching the upstream commitment.

  And there was a discussion in debian-lts[1] about marking this CVE as
no-dsa or ignored, which is how things are flagged in the security
tacker.

  Given the amount of work required for very little gain and an
inactive upstream, I'm tagging this bug as wontfix.

Mathias

[1] -- https://lists.debian.org/debian-lts/2020/02/msg00102.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-lxc-devel/attachments/20240128/8ac30266/attachment.sig>