[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Another CVE-less vulnerability



On Mon, 26 Apr 2010 22:20:35 +0200 Francesco Poli wrote:

> On Sat, 24 Apr 2010 16:54:50 +0200 Francesco Poli wrote:
> 
> > Hi everybody!  :-)
> > 
> > The recent DSA-2039-1 [...] is about a CVE-less vulnerability in cacti,
> > reported as bug #578909 [...].

It seems that the vulnerability has been assigned CVE number
CVE-2010-1431 ...

> [...]
> > This means that the vulnerability tracker page does not say that the
> > flaw has been fixed in lenny (security)...
> 
> Thanks to a mysterious volunteer behind the curtains, the tracker seems
> to have been updated...
[...]
> BTW, the bug report claims that the vulnerability has been fixed for sid
> in cacti/0.8.7e-3: I think this information should added to the
> tracker, as well...

The tracker information now seems to be OK.
Maybe the same masked volunteer behind the curtains has updated the
tracker: thanks again!   ;-)

-- 
 http://www.inventati.org/frx/progs/scripts/pdebuild-hooks.html
 Need some pdebuild hook scripts?
..................................................... Francesco Poli .
 GnuPG key fpr == C979 F34B 27CE 5CD8 DC12  31B5 78F4 279B DD6D FCF4

Attachment: pgp2hcuB5ZKAC.pgp
Description: PGP signature


Reply to: