[Secure-testing-team] Yet another question about the tracker

[Francesco Poli]

Hi again!

Many vulnerabilities are listed in [1] for kernel-source-2.6.8.
On the other hand, DSA-1103-1 (which is listed as well) claims that
all of them but the first one (CVE-2005-2873) are fixed in
version 2.6.8-*sarge3 (available in the security.debian.org repository).
What's wrong?
Shouldn't these vulnerabilities be absent from [1]?

[1] http://idssi.enyo.de/tracker/status/release/stable



P.S.: Please go on Cc:ing me, as I am not a subscriber of this list.
Thanks!

-- 
    :-(   This Universe is buggy! Where's the Creator's BTS?   ;-)
......................................................................
  Francesco Poli                             GnuPG Key ID = DD6DFCF4
 Key fingerprint = C979 F34B 27CE 5CD8 DC12  31B5 78F4 279B DD6D FCF4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20060629/9f4b7fb6/attachment.pgp