Re: tcpdump

[Colin Watson <cjwatson@debian.org>]

On Wed, Jan 21, 2004 at 11:48:13PM +0800, David Palmer. wrote:
> I've just done a security update.
> I'm a newbie, on a single PC, in a home situation, so for me it
> doesn't matter so much, but I was wondering why a package like
> tcpdump, that would have relevance in a large commercial network, is
> released as part of a stable security update with bugs the like of
> #227844, #227845, and #227846 against it.

According to the tags on those bugs, they currently only affect sarge,
i.e. testing, not stable; and the CVE numbers on the bugs you see match
those fixed in the security update. Do you have information to
contradict this?

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]