[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Wrong year in DSA 128[12]-1, not in w.d.o/security/



On Mon, Apr 30, 2007 at 04:27:17PM +0200, Gerfried Fuchs wrote:
> * Jens Seidel <jensseidel@users.sf.net> [2007-04-28 13:09]:
> > Please note that I checked already the last time such a problem was
> > reported for similar errors (manually via grep) and fixed indead a few
> > more. I did it now again, there are no other wrong dates (but I did not
> > checked for proper CVE numbers, they could be wrong and contain 2006
> > quit often even for recent advisories ...)
> 
>  Please never do an automatic update on CVE numbers if you think it
> contains wrong values - always doublecheck them with the database.  I

Of course!

> can well be that one issue received a CVE ID back in 2006 already but
> was fixed only recently.

This wasn't true for CVE-2006-0908 (instead of CVE-2007-0908) in
DSA-1264-1. But feel free to check again ...

PS: I missed both in the subject mentioned DSAs on the home page for at
least one day. Since I fixed the date already a few days ago it seems
there was no build during multiple days!

Jens



Reply to: