External check

2014-09-25 Thread Raphael Geissert
CVE-2014-0170: RESERVED
CVE-2014-6603: RESERVED
--
The output might be a bit terse, but the above ids are known elsewhere,
check the references in the tracker. The second part indicates the status
of that id in the tracker at the moment the script was run.


-- 
To UNSUBSCRIBE, email to debian-security-tracker-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/5423b9ae.3azos24ivnwlsnpy%atomo64+st...@gmail.com



Bug#762781: security-tracker: Provide list of candidates for dsa-needed.txt/dla-needed.txt

2014-09-25 Thread Raphaƫl Hertzog
Package: security-tracker
Severity: wishlist

It would be nice if the security tracker could provide by release a list
of packages with open vulnerabilities (i.e. neither unimportant nor tagged
as no-dsa) that are not yet listed in dsa-needed.txt/dla-needed.txt
depending on the case.

It would help triage issues where no formal decision has been taken yet
on whether a DSA/DLA is warranted.

-- System Information:
Debian Release: jessie/sid
  APT prefers squeeze-lts
  APT policy: (500, 'squeeze-lts'), (500, 'unstable'), (500, 'testing'), (500, 
'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-security-tracker-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140925065823.17625.70633.report...@x230-buxy.home.ouaza.com



Bug#642987: marked as done (Entries marked as end-of-life should not be displayed as fixed in the web overview)

2014-09-25 Thread Debian Bug Tracking System
Your message dated Thu, 25 Sep 2014 09:43:20 +0200
with message-id 201409250943.22087.hol...@layer-acht.org
and subject line end-of-life now visible in security tracker
has caused the Debian Bug report #642987,
regarding Entries marked as end-of-life should not be displayed as fixed in 
the web overview
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
642987: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642987
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: security-tracker
Severity: normal

end-of-life is used to mark a package as no longer supported in an otherwise 
supported
release. Such entries are currently displayed as fixed in the issue overview, 
e.g.:
http://security-tracker.debian.org/tracker/CVE-2010-3908. The web overview 
should
rather show end-of-life instead of fixed.

Cheers,
Moritz


---End Message---
---BeginMessage---
Hi,

subject says it all.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.
---End Message---