Re: DSA-2000-1 vs. tracker
On Fri, 19 Feb 2010 00:53:40 +0100 Francesco Poli wrote:
> Hi again!
>
> It seems to me that DSA-2000-1 [1] is affected by a similar problem as
> DSA-1999-1.
>
> The DSA claims that nine vulnerabilities are fixed in version 4:0.5
> +svn20090706-5 for sid, but the CVE tracker pages (linked from the DSA
> tracker page [2]) disagree.
> Please update the tracker, if needed.
the maintainer commited a bunch of patches in -3, and stated that the
issues were fixed, but i can't find enough info to verify this yet, so
i would not be confident in changing the tracking.
if someone had the inclinatation, they could test the 73 proof of
concepts and report back whether all of them fail with the new version.
mike
Reply to: