Re: CVE-2021-4034 in testing seems to be fixed but showed as vulnerable

To: Hideki Yamane <henrich@iijmio-mail.jp>
Cc: debian-security-tracker@lists.debian.org
Subject: Re: CVE-2021-4034 in testing seems to be fixed but showed as vulnerable
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 27 Jan 2022 14:42:21 +0100
Message-id: <[🔎] YfKhPeh7tFmtu7ep@eldamar.lan>
Mail-followup-to: Hideki Yamane <henrich@iijmio-mail.jp>, debian-security-tracker@lists.debian.org
In-reply-to: <[🔎] 20220127203432.bfaa4ba3fc041a2be6fec40f@iijmio-mail.jp>
References: <[🔎] 20220127203432.bfaa4ba3fc041a2be6fec40f@iijmio-mail.jp>

Hi!

On Thu, Jan 27, 2022 at 08:34:32PM +0900, Hideki Yamane wrote:
> Hi,
> 
>  policykit-1 in testing is noted as vulnerable but its version
>  0.105-31.1~deb12u1 fixed CVE-2021-4034.
> 
>  Will the data in security-tracker be updated automatically?

I'm aware of that, but I have not added a fixed version explicitly for
testing, as this was not meant to be done this way. 0.105-31.1~deb12u1
was only uploaded to bookworm directly as the unstable->testing
migration had to be stopped due to #1004272 due to the urgency of
CVE-2021-4034.

Regards,
Salvatore

Reply to:

Follow-Ups:
- Re: CVE-2021-4034 in testing seems to be fixed but showed as vulnerable
  - From: Hideki Yamane <henrich@iijmio-mail.jp>

References:
- CVE-2021-4034 in testing seems to be fixed but showed as vulnerable
  - From: Hideki Yamane <henrich@iijmio-mail.jp>

Prev by Date: Bug#1001451: Candidate script updates
Next by Date: Re: CVE-2021-4034 in testing seems to be fixed but showed as vulnerable
Previous by thread: CVE-2021-4034 in testing seems to be fixed but showed as vulnerable
Next by thread: Re: CVE-2021-4034 in testing seems to be fixed but showed as vulnerable
Index(es):
- Date
- Thread