[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: DSA-1615-1 vs. tracker



On Friday 25 July 2008 01:07, Francesco Poli wrote:
> > > I think I've noticed another DSA with tracker inconsistencies.
> > > DSA-1615-1 [1] claims that several CVEs are fixed in
> > > xulrunner/1.9.0.1-1 for sid.  On the other hand, most of these CVEs
> > > (which are linked from the DSA tracker page [2]) are not reported as
> > > fixed in
> > > xulrunner/1.9.0.1-1 by the tracker.

> Maybe you're right, but... one day is gone and the inconsistencies are
> still there.

Well, on a page for a specific CVE you can see under the "xulrunner" package 
entry that etch (security) is indeed fixed, so I believe the tracker data is 
in order. That the top of the page says "packages iceape, icedove, iceweasel, 
xulrunner are vulnerable" may be an error in the display code of the tracker?


Thijs

Attachment: pgphDKFQTGduz.pgp
Description: PGP signature


Reply to: