Re: DSA-361-2

[Matt Zimmerman <mdz@debian.org>]

On Sun, Aug 10, 2003 at 01:27:50PM +0200, Gian Piero Carrubba wrote:

> can anyone explain me the DSA-361-2?  Does it mean that the
> vulnerabilities reported were already addressed in woody in version
> 2.2.2-6woody2 ?
>
> I haven't found 2.2.2-6woody2 in the changelog, however 2.2.2-6 has been
> released in december 2001

2.2.2-6woody2 is a later version than 2.2.2-6.  2.2.2-6 has the bugs,
2.2.2-6woody2 has the fixes.

> , so i've to assume fake vulnerabilities (CAN 2003-... ), or at least they
> don't apply to deb packages... but then 2.2.2-13.woody.8 what is for?

I do not understand the problem.

-- 
 - mdz