Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #4518

Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1] curl security update)

From Holger Levsen <holger@layer-acht.org>
Newsgroups linux.debian.security
Subject Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1] curl security update)
Date 2016-02-02 18:20 +0100
Message-ID <qXMMr-6gE-17@gated-at.bofh.it> (permalink)
References <qVxou-3nT-19@gated-at.bofh.it> <qXLQm-5Be-11@gated-at.bofh.it> <qXM02-5FW-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Hi Wolfgang,

On Dienstag, 2. Februar 2016, Wolfgang Jeltsch wrote:
>   • Where does the tracker talk about security policies? (I actually
>     doubt that such information is in the tracker at all.)

That's out of scope for the tracker indeed, however right now I dont know 
where to find such policies.

>   • Where is a list of unfixed security issues?

https://security-tracker.debian.org/tracker/ links to filters for the 
different suites, eg "Vulnerable packages in the stable suite" points to 
https://security-tracker.debian.org/tracker/status/release/stable where you 
can tune your view.

So https://security-
tracker.debian.org/tracker/status/release/stable?filter=1&filter=high_urgency&filter=medium_urgency&filter=low_urgency&filter=unimportant_urgency&filter=unassigned_urgency&filter=undetermined_issues&filter=nodsa 
is probably the URL which will show you the highest number of security issues 
in stable ;)
 
> URLs would be highly appreciated.

not directly answering your questions, but maybe still useful:

http://security-team.debian.org/security_tracker.html


cheers,
	Holger

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: [SECURITY] [DSA 3455-1] curl security update Wolfgang Jeltsch <7o2lccqg@acme.softbase.org> - 2016-02-02 10:50 +0100
  Re: [SECURITY] [DSA 3455-1] curl security update Freddy Spierenburg <freddy@snarl.nl> - 2016-02-02 11:10 +0100
    Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1] curl  security update) Wolfgang Jeltsch <7o2lccqg@acme.softbase.org> - 2016-02-02 16:40 +0100
      Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1]  curl security update) Yves-Alexis Perez <corsac@debian.org> - 2016-02-02 17:20 +0100
        Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1]  curl security update) Wolfgang Jeltsch <7o2lccqg@acme.softbase.org> - 2016-02-02 17:30 +0100
          Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1] curl security update) Holger Levsen <holger@layer-acht.org> - 2016-02-02 18:20 +0100
          Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1]  curl security update) Sébastien NOBILI <sebnewsletter@free.fr> - 2016-02-02 18:50 +0100
          Re: Security support incomplete? Davide Prina <davide.prina@gmail.com> - 2016-02-02 22:30 +0100
            Re: Security support incomplete? Davide Prina <davide.prina@gmail.com> - 2016-02-02 23:10 +0100
        Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1]  curl security update) Marc Haber <mh+debian-security@zugschlus.de> - 2016-02-02 18:00 +0100
        Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1]  curl security update) Lupe Christoph <lupe@lupe-christoph.de> - 2016-02-02 18:10 +0100
        Re: Security support incomplete? "Pedro M. Jorge" <pmjorge@lip.pt> - 2016-02-02 18:50 +0100
          Re: Security support incomplete? Yves-Alexis Perez <corsac@debian.org> - 2016-02-02 19:10 +0100

csiph-web