Thanks. Is it ever possible to trust these sources, and what do you not want to do, and you cannot manage them? https://salsa.debian.org/security-tracker-team/security-tracker/-/raw/master/data/DSA/list https://salsa.debian.org/security-tracker-team/security-tracker/-/raw/master/data/DLA/list
ср, 8 мая 2024 г. в 17:10, Thomas Lange <la...@cs.uni-koeln.de>: > Hi, > > DSA-5248-1 is about php-twig - security update. This is correct in the > security tracker https://security-tracker.debian.org/tracker/DSA-5248-1 > > Unfortunally the email that was send about this security fix > https://lists.debian.org/debian-security-announce/2022/msg00217.html > had the wrong DSA number in the subject line and the mail itself. > > In our web pages, we can fix this, so the security entry links to the > right email. This means www.debian.org/security/DSA-5248-1 will link > to the correct email, but this email includes a wrong DSA number. > Sorry for this confusion, but we cannot change the email afterwards. > > Here's the file of rewrites/fixes we use to link to the correct emails: > > https://salsa.debian.org/webmaster-team/webwml/-/blob/master/english/security/data/dsa.fixes?ref_type=heads > > -- > regards Thomas >