Re: DSA-2000-1 vs. tracker

[Michael Gilbert <michael.s.gilbert@gmail.com>]

On Sat, 20 Feb 2010 12:26:14 +0100 Francesco Poli wrote:

> On Fri, 19 Feb 2010 17:10:41 -0500 Michael Gilbert wrote:
> 
> [...]
> > the problems are very likely solved, but there's no evidence either way
> > yet that i've seen.  i would rather see them tested before declaring
> > them done
> 
> I can understand your need for additional evidence.
> 
> Nonetheless, the problem is still that we have an inconsistency here:
> the DSA claims that sid is fixed, while the tracker says that sid is
> still vulnerable.

i've checked now.  these cves appear to be fixed, but many issues are
still open that have yet to get a cve.

mike