[Secure-testing-team] [Secure-testing-commits] r12553 - data/CVE

[Michael S. Gilbert]

On Mon, 10 Aug 2009 18:58:17 +0000, Nico Golde wrote:
> Author: nion
> Date: 2009-08-10 18:58:17 +0000 (Mon, 10 Aug 2009)
> New Revision: 12553
> 
> Modified:
>    data/CVE/list
> Log:
> fix libxml annotation
> 
> Modified: data/CVE/list
> ===================================================================
> --- data/CVE/list	2009-08-10 18:09:16 UTC (rev 12552)
> +++ data/CVE/list	2009-08-10 18:58:17 UTC (rev 12553)
> @@ -964,7 +964,7 @@
>  CVE-2009-2416 [libxml2 pointer-user-after-free]
>  	RESERVED
>  	- libxml2 <unfixed> (low; bug #540865)
> -	[etch] - libxml <unfixed>
> +	[lenny] - libxml <removed>
>  CVE-2009-2415 [heap-based buffer overflow in memcached]
>  	RESERVED
>  	{DSA-1853-1}
> @@ -976,7 +976,7 @@
>  CVE-2009-2414 [libxml2 stack recursion]
>  	RESERVED
>  	- libxml2 <unfixed> (medium; bug #540865)
> -	[etch] - libxml <unfixed>
> +	[lenny] - libxml <removed>

i still don't think this is what you're trying to get at.  you want to
mark it is removed from unstable, which will automatically also mark
it removed from lenny.  then you want to do something special for
etch, and i think your intent is a no-dsa?  or if you don't want to do
that, you can not add an etch entry, and it will be tracked as affected.

mike