Re: DSA-2283-1 vs. tracker

[Michael Gilbert <michael.s.gilbert@gmail.com>]

Moritz Mühlenhoff wrote:

> On Mon, Jul 25, 2011 at 09:52:15PM +0200, Francesco Poli wrote:
> > Hi all,
> > it seems to me that the epoch is missing from the fixed squeeze version
> > of krb5-appl in the DSA-2283-1 [1] tracker page [2].
> 
> Why? It's already there:
> 
> [25 Jul 2011] DSA-2283-1 krb5-appl - programming error
>         {CVE-2011-1526}
>         [squeeze] - krb5-appl 1:1.0.1-1.1
> 
> > Moreover, the DSA says that sid will be fixed soon, but the tracker
> > seems to think that the CVE does not affect sid.
> 
> Thanks, fixed.

An issue with this update is that it didn't get a squeeze version
number, so right now the squeeze package version number is ahead of the
other releases.

Mike