On Wed, 23 Jul 2008 23:24:50 +0200 (CEST) Thijs Kinkhorst wrote:

> Hi Francesco,
> 
> > I think I've noticed another DSA with tracker inconsistencies.
> > DSA-1615-1 [1] claims that several CVEs are fixed in xulrunner/1.9.0.1-1
> > for sid.  On the other hand, most of these CVEs (which are linked from the
> > DSA tracker page [2]) are not reported as fixed in
> > xulrunner/1.9.0.1-1 by the tracker.
> 
> This is how the tracker currently works. The list with DSA's is
> automatically updated when a new DSA is released, e.g. in commit 9402.
> However, the list of DSA's and the CVE's they fixed are only merged into
> the data/CVE/list file twice daily at 11/23:14 (see commit 9404). So this
> gets fixed automatically twice a day.

Maybe you're right, but... one day is gone and the inconsistencies are
still there.

-- 
 http://frx.netsons.org/doc/index.html#nanodocs
 The nano-document series is here!
..................................................... Francesco Poli .
 GnuPG key fpr == C979 F34B 27CE 5CD8 DC12  31B5 78F4 279B DD6D FCF4

Attachment: pgpciqEZMomKj.pgp
Description: PGP signature

Reply via email to