On Tue, 1 Feb 2005 09:28:45 +0000 (GMT), Mark J Cox <mjc@xxxxxxxxxx> wrote: > What would be incredibly useful is to move (to being a Provides) the CVE > names for issues that we're including a backported fix for. Where we've > moved to an upstream version that contains fixes those CVE names are less > important as they can be deduced by a simple NV check. I look forward to building pathological packages that have a requires on a CVE name provides. -jef