On Wed, Sep 06, 2017 at 05:39:33PM +1000, Brian May wrote:
> Hello,
>
> What does "<not-affected> (Incomplete fix not applied)" mean?
>
> The <not-affected> part seems to say it is not even affected, while the
> comment seems to say it hasn't been fixed?
Fix foo introduced a new vulnerability, but since foo hadn't been
applied to the version in stable, it's not affected either.
Cheers,
Moritz