Re: CVE ID missed in DLA, squid3
On 10 November 2018 7:40:02 PM IST, Markus Koschany <apo@debian.org> wrote:
>Hi,
>
>Am 10.11.18 um 13:38 schrieb Abhijith PA:
>> Hello.
>>
>>
>> What we should do when we miss to specify a CVE ID in a DLA/DSA ? Can
>we
>> just normally insert in next advisory release.? For eg: DLA-478-1[1]
>> released for squid3 on 16 May 2016 missed to mention 'CVE-2016-3948'.
>
>
>You can add the missing CVE entry to data/DLA/list manually and you
>also
>have to mark CVE-2016-3948 as fixed by DLA-478-1 like that {DLA-478-1}.
>
>Markus
Thanks. I will manually add.
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
Reply to: