[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#742855: Sort releases correctly in tabular view. (Closes: #742855)



Control: tags -1 - pending

Hi,

On Sat, Sep 13, 2014 at 01:32:38AM +0200, Holger Levsen wrote:
> Hi,
> 
> commit baa7d44e460efe2b24e7b029633701cd29986d0d
> Author: Holger Levsen <holger@layer-acht.org>
> Date:   Sat Sep 13 01:23:35 2014 +0200
> 
>     Sort releases correctly in tabular view. (Closes: #742855)

I tested the patch in my local instance. It does sort now the CVEs in
descending order, which was not what I meant. We had so far the oldest
CVEs on top which this patch would changes.

My change request however was about something else: In the tabular
view, from left to right, it should be sorted by releases and not
having a mix.

libspring-java as by now, might change in future, shows right now:

Bug           | jessie     | sid        | wheezy     | Description
-------------------------------------------------------------------------------------------
CVE-2014-0225 | fixed      | fixed      | vulnerable | Information disclosure via SSRF
CVE-2014-3578 | vulnerable | vulnerable | vulnerable | Spring framework directory traversal
-------------------------------------------------------------------------------------------

This should be ordered (and for future releases):

Bug           | wheezy     | jessie     | sid        | Description
-------------------------------------------------------------------------------------------
CVE-2014-0225 | vulnerable | fixed      | fixed      | Information disclosure via SSRF
CVE-2014-3578 | vulnerable | vulnerable | vulnerable | Spring framework directory traversal
-------------------------------------------------------------------------------------------

So "(squeeze) <= wheezy <= jessie <= sid", and for future releases
then "(squeeze) <= wheezy <= jessie <= X <= sid" in the collumns (and
keep the ordering from oldest to newest CVE).

Thanks for looking into this!

Regards,
Salvatore


Reply to: