On Mon, 10 Aug 2009 19:46:52 -0400 Michael S. Gilbert wrote: > On Mon, 10 Aug 2009 23:32:22 +0200, Francesco Poli wrote: [...] > > The tracker [2] seems to fail to correctly provide information about > > lenny, since it seems to think that all CVEs are fixed for lenny in > > version 7:6.3.7.9.dfsg2-1~lenny3 (while this is true for the last one > > only, as the other ones are already fixed in current lenny version, > > rather than in a security update). [...] > > Please fix these inconsistencies, if possible. > > this is a flaw in the tracker. we don't have the ability to separate > out CVEs per release in the DSA list, so we end up with this problems > like this. i've been meaning to look into fixing this, and i may find > the time, but until then, there is no sane way to correct the problem. That's unfortunate. There's a difference in etch-backports information, though: how is it obtained? -- New location for my website! Update your bookmarks! http://www.inventati.org/frx ..................................................... Francesco Poli . GnuPG key fpr == C979 F34B 27CE 5CD8 DC12 31B5 78F4 279B DD6D FCF4
Attachment:
pgphrjPeduBTi.pgp
Description: PGP signature