Re: DSA-2114-1 vs. tracker
On Sat, 2 Oct 2010 17:25:31 +0200 Francesco Poli wrote:
> On Mon, 27 Sep 2010 22:21:12 +0200 Francesco Poli wrote:
>
> > On Sun, 26 Sep 2010 23:41:00 +0200 Francesco Poli wrote:
> [...]
> > > [1] http://security-tracker.debian.org/tracker/DSA-2114-1
> > > [2] http://lists.debian.org/debian-security-announce/2010/msg00163.html
> [...]
> >
> > However, the DSA [2] says that the fixed version for lenny (security)
> > is 1:1.5.6.5-3+lenny3.2, while the tracker [1] says 1:1.5.6.5-3+lenny4 :
> > could you please clarify?
>
> Could someone please clarify?
that dsa is a bit odd. it is for a regression introduced in a point
release update, and the security issue itself was appropriately
fixed in the point update. i've changed the tracker to reflect that.
mike
Reply to: