[Secure-testing-team] Squirrelmail messed up on the tracker?

Francesco Poli frx at firenze.linux.it
Mon May 14 22:40:39 UTC 2007


On Mon, 14 May 2007 22:52:28 +0200 Stefan Fritsch wrote:

> On Montag, 14. Mai 2007, Francesco Poli wrote:
> > On the other hand, DSA 1290-1[3] claims that the problem has been
> > fixed in
> > version 1.4.4-11  for sarge
> > version 1.4.9a-2  for etch
> > version 1.4.10a-1 for sid
> 
> > What's wrong?
> 
> There was a missing epoch in the DSA and in the tracker. Thanks for 
> notifying us.

You're welcome!  :)

> 
> I have fixed the information in the tracker. Can somebody fix the DSA 
> on security.d.o?

There's still something wrong, it seems.
Testing and unstable are still claimed to be vulnerable by the tracker,
but the DSA claims that the problem is fixed in version 2:1.4.10a-1,
which is already in unstable and testing, according to the PTS...


P.S.: Please go on Cc:ing me on replies, as I am not a list subscriber. 
      Thanks.

-- 
 http://frx.netsons.org/doc/nanodocs/testing_workstation_install.html
 Need to read a Debian testing installation walk-through?
..................................................... Francesco Poli .
 GnuPG key fpr == C979 F34B 27CE 5CD8 DC12  31B5 78F4 279B DD6D FCF4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20070515/a7201c18/attachment.pgp 


More information about the Secure-testing-team mailing list