Re: CVE triage in the tracker
-----BEGIN PGP SIGNED MESSAGE-----
On Tue, 2018-05-15 at 00:14 -0400, Hugo Lefeuvre wrote:
> but I'm pretty sure it was wrong, so I changed it to
> [wheezy] - ming 0.4.4-1.1+deb7u8
> Still I'm not completely sure it's the right way to proceed. Can anybody
> take a look ?
Yes, if the vulnerability was fixed, even in a previous version, better add
the exact version.
> Second question: Even if Ming isn't present in unstable, the tracker
> still mentions (unstable) - (unfixed) in the second table. IMO this
> row makes no sense, is it a bug ?
Then you can put:
- ming <removed>
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----