Re: [Security-Discuss] security advisories web page out of sync with mailinglist

On Mon, 17 Jul 2006, Antonio wrote:

> Hello, I noticed that http://www.mandriva.com/security and 
> http://www.mandriva.com/security/advisories?dis=2006.0 don't display the 
> [ MDKSA-2006:123 ] - Updated kernel packages fixes multiple vulnerabilities, 
> that is available on mirrors.

Fixed, sorry about that.

> It's not the first time I've seen that security advisories web pages are a bit 
> out of sync. Please don't consider this a complain, it's just for let you 
> know, in case you don't noticed this.
> I think however my MandrivaUpdate is braindamaged, since it don't find the 
> update for the kernel packages, and I have to install it with urpmi. I am on 
> 2006.0 community and the kernel I was using is 2.6.12.22, so since 2.6.12.23 
> is a security update and not a new kernel, it should be installed by 
> MandrivaUpdate. Anyone have ideas why this not happened?
> A similar problem occured in the recent past with xine-lib. MandrivaUpdate 
> however still successfully update other packages !?
> 

Afaik kernels are treated the same by Mandriva Update and urpmi, 
regardless of whether it's a new kernel or an update. That is, they aren't 
installed automagically.

That's why the kernel advisory includes this link:

http://www.mandriva.com/en/security/kernelupdate 

Why xine-lib was skipped, I don't know. If you see the GUI tool 
consistantly overlooking packages that urpmi picks up, I'd suggest filing 
a bug in bugzilla and see if you can get the maintainer to look at.

-- 
Stew Benedict - Mandriva
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________