[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability



On Wed, May 16, 2007 at 09:03:12AM +1000, Andrew Vaughan wrote:
> > Package        : qt4-x11
> <snip>
> > For the stable distribution (etch), this problem has been fixed in
> > version 4.2.1-2etch1
> >
> Etch shipped with 4.2.1-2+b1 packages.  
> 
> $ dpkg --compare-versions "4.2.1-2+b1" ">>" "4.2.1-2etch1" && echo yes
> yes
> 
> Perhaps that should have been 4.2.1-2+etch1?

Nice catch.  I'm a little bit confused by
http://packages.debian.org/stable/libs/libqt4-core which lists source
versions 4.2.1-2, but http://ftp.debian.org/debian/pool/main/q/qt4-x11/
definitely does contain 4.2.1-2+b1, so it seems that the version in the
update is indeed incorrect.

<sigh>
noah

Attachment: signature.asc
Description: Digital signature


Reply to: