Sean Whitton writes ("Bug#1069001: dgit: tag2upload: [dgit ...] should include
source= and version= fields"):
> As discussed elsewhere, we want source= and version= tags in the
> tag2upload metadata to prevent the possibility of a certain form of
> attack by someone who is
Source: dgit
Version: 11.8
Severity: important
Dear maintainer,
As discussed elsewhere, we want source= and version= tags in the
tag2upload metadata to prevent the possibility of a certain form of
attack by someone who is able to replace git objects on salsa.
--
Sean Whitton
signature.asc
2 matches
Mail list logo
