On 11.01.2014 14:02, Jeff Trawick wrote: > On Sat, Jan 11, 2014 at 2:51 AM, Ben Reser <b...@reser.org > <mailto:b...@reser.org>> wrote: > > On 1/10/14, 5:38 AM, Jeff Trawick wrote: > > [ ] It is an accepted practice (but not required) to obscure or > omit the > > vulnerability impact in CHANGES or commit log information when > committing fixes > > for vulnerabilities to any branch. > > > > [X] It is mandatory to provide best available description and any > available > > tracking information when committing fixes for vulnerabilities to > any branch, > > delaying committing of the fix if the information shouldn't be > provided yet. > > > > [ ] _______________ (fill in the blank)
Rainer
