[Secure-testing-team] update sid/testing fixed version in data/CVE/list based on DSA?

Yves-Alexis Perez corsac at debian.org
Wed May 30 11:11:50 UTC 2012


On mer., 2012-05-30 at 10:18 +0300, Henri Salo wrote:
> On Wed, May 30, 2012 at 07:55:50AM +0200, Yves-Alexis Perez wrote:
> > Hi,
> > 
> > as far as I understand it, when generating a DSA, the fixed version for
> > Squeeze is added to data/DSA/list and that is used by Joey scripts to
> > put the fixed version in data/CVE/list later (so one doesn't have to
> > manually put it). Couldn't that be done for Sid/Testing versions when
> > possible, since we already put those in the DSA file?

A little correction, the fixed version is not added magically to
data/CVE/list indeed, it's just used by the tracker to show the
(supposed) fixed version, I mean the second part of the web page. But
still, it'd be nice to have the sid/testing fixed version there too.
I'll look at providing a patch.
> > 
> > Regards,
> > -- 
> > Yves-Alexis
> 
> Are these scripts in SVN somewhere? 

Yes, look in bin/ and lib (not sure exactly where though)


-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20120530/db843269/attachment.pgp>


More information about the Secure-testing-team mailing list