[Secure-testing-team] reliability of oldstable data
Moritz Muehlenhoff
jmm at inutil.org
Mon Dec 19 20:15:14 UTC 2005
Stefan Fritsch wrote:
> On Monday 19 December 2005 18:37, Moritz Muehlenhoff wrote:
> > Woody is fully supported to the same extent that Sarge is supported
> > by the tracker. It just has more false positives. See the svn
> > commit logs for more information.
>
> Woody may also have false negatives, i.e. missing entries for some old
> CVEs that affect woody. Sarge should not have any false negatives.
I've corrected all CVE/list entries which had missing entries back until
somewhere in 2003, and the rest should be fixed soon.
Cheers,
Moritz
More information about the Secure-testing-team
mailing list