[Secure-testing-team] Re: [SECURITY] Testing security archive move

Francesco Poli frx at firenze.linux.it
Mon Jun 19 20:50:34 UTC 2006


On Thu, 15 Jun 2006 23:28:56 +0200 Francesco Poli wrote:

[ about http://idssi.enyo.de/tracker ]
> It seems to report a fairly large amount of information.
> It also seems to track vulnerabilities in stable, which is very
> useful!

I did a little trivial counting of vulnerabilities (as tracked by
[1][2][3]) and here's the results, as of today:

[1] http://idssi.enyo.de/tracker/status/release/unstable
[2] http://idssi.enyo.de/tracker/status/release/testing
[3] http://idssi.enyo.de/tracker/status/release/stable


                       unstable   testing    stable
----------------------------------------------------
 low                       96        99       160
 medium                    61        63       105
 high                      15        28        30
 unclassified              34        59        66
----------------------------------------------------
 both in testing & unstable         177
 fixed in unstable                   72
----------------------------------------------------
 total                    206       249       361
----------------------------------------------------
 fixed in testing-security            1
----------------------------------------------------


If I read these data correctly, it seems that testing could be said to
be currently more secure than stable!
And unstable seems to be even more secure...

Is my count correct?
Are my conclusions correct?
Is there anything that I miss?
What do you think?

-- 
    :-(   This Universe is buggy! Where's the Creator's BTS?   ;-)
......................................................................
  Francesco Poli                             GnuPG Key ID = DD6DFCF4
 Key fingerprint = C979 F34B 27CE 5CD8 DC12  31B5 78F4 279B DD6D FCF4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20060619/7460c324/attachment.pgp


More information about the Secure-testing-team mailing list