Mismatch in Git and JSON data

To: debian-security-tracker@lists.debian.org
Cc:
Subject: Mismatch in Git and JSON data
From: Mayank Agarwal <mayank.agarwal@cybersecurityworks.com>
Date: Tue, 14 Feb 2023 11:47:49 +0530
Message-id: <[🔎] CAMFxAM2pBCUSK4JH_nm0dQ3+6=St1GYfTEgSy=W75dr5Td_=cw@mail.gmail.com>

Hi Team,

I was using Git repository to track security issues in Debian products. Recently I noticed that some issues are mentioned in the JSON feed but they are not reported in the Git repository.

Examples -

Firefox and Firefox-esr packages with issues such as CVE-2022-46877

f2fs-tools with issues such as CVE-2020-6107

There are many examples like that. If you can help me understand when to use Git and when to consume JSON feed then it will be a big help.

Regards,

Mayank

Reply to:

Prev by Date: External check
Next by Date: External check
Previous by thread: Bug#1030321: marked as done (security-tracker: Add support to fetch information for non-free-firmware archive section)
Index(es):
- Date
- Thread