On Tue, 22 Mar 2011 16:11:33 +0100 Arne Wichmann wrote: > Hi, > > The situation around CVE-2010-3847 confuses me a bit. The security-tracker > says CVE-2010-3847 is still open, but the corresponding bug #600667 is > closed. The same of cource applies for CVE-2011-0536. > > Is there anything I can do to clear things up?
The situation around those three issues is confusing, and I just haven't had time to figure it out. If you want to research the advisories, compare to the source code, and report your findings, that would be helpful. Best wishes, Mike -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110322153500.332623ea.michael.s.gilb...@gmail.com