Package: lintian Severity: wishlist X-Debbugs-CC: secur...@debian.org Please warn about the use of TEMP CVE identifiers in debian/changelog. These identifiers are temporary and go away when CVEs are assigned so they are not at all useful to record.
The regex is TEMP-\d{7}-\d{6} (case sensitive): https://anonscm.debian.org/viewvc/secure-testing/lib/python/sectracker/parsers.py?view=markup#l262 Various folks make this mistake, some examples: https://bugs.debian.org/807855 https://bugs.debian.org/799019 https://codesearch.debian.net/search?q=path:debian/changelog%20TEMP- -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part