Re: DSA-2132-1 vs. tracker
On Sun, Dec 12, 2010 at 5:46 AM, Francesco Poli wrote:
> Hi all!
>
> According to DSA-2132-1 [1], various CVEs are fixed in
> iceweasel/3.5.15-1 for squeeze and sid.
> On the other hand, the tracker [2] states that those CVEs are only
> fixed in iceweasel/3.5.16-1, which is currently in sid, but has not yet
> migrated into squeeze.
>
> Typo in the DSA or incorrect tracker data?
> Could you please explain?
The DSA text is incorrect. These issues were not fixed in 3.5.15,
which was released in October. They were fixed in .16, which was just
released.
Mike
Reply to: