Re: stable vs. testing: same versions, different status

["Michael S. Gilbert" <michael.s.gilbert@gmail.com>]

On Mon, 29 Jun 2009 20:14:59 +0200, Francesco Poli wrote:
> Great!
> Only
> 
> http://security-tracker.debian.net/tracker/CVE-2009-1392
> http://security-tracker.debian.net/tracker/CVE-2009-0146
> 
> seem to be unfixed, now.

should be fixed now.

> As far as sid is concerned, I think vulnerabilities should be marked as
> fixed too, as appropriate (or does this have bad consequences?):

yes these should be fixed, and i have done so.  there should be no
negative consequences as long as the maintainers make sure to retain the
debian patches for this when new upstream versions are brought in.

mike