Please help with discrepancies in CVE-2011-3578
Hi Team,
I had prepared a new security-stable version for mantis package to fix
some new CVE's, and I found out that CVE-2011-3578 [1], patched on mantis
1.1.8+dfsg-10squeeze1, from 2011, was not yet updated in the security
tracker.
The CVE-2011-3578 was not yet assigned when the security package,
including the patch [2],
12-Fix-640297-LFI-XSS-injection-bug-action-group-1.diff [3], was uploaded
and fixed.
Please, could you update the tracker and fix it?
Thanks in advance,
Regards,
Sils
PS: please CC me, I'm not subscribed on the list.
[1] http://security-tracker.debian.org/tracker/CVE-2011-3578
[2]
http://packages.debian.org/changelogs/pool/main/m/mantis/mantis_1.1.8+dfsg-10squeeze1/changelog#version1.1.8_dfsg-10squeeze1
[3] http://patch-tracker.debian.org/package/mantis/1.1.8+dfsg-10squeeze1
Reply to: