Re: [Security-Discuss] 2006 advisories page yet again stale

--P6PRkhImOxklJvkF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Robert M. Riches Jr. <[email protected]> [2006-08-17 10:21:17 -0700]:

> > > Yet again, the security advisories page at
> > >
> > >     http://www.mandriva.com/security/advisories?dis=3D2006.0
> > >
> > > is stale.  It does not show the Firefox update.  I seem to
> > > recall other announcements that are also not showing on the
> > > page.
> > >
> > > Is there someone who should be contacted to try to get the
> > > infrastructure fixed so the page doesn't get stale week
> > > after week?
> >
> >
> > there is FF page, this is the second entry:
> >
> > 2006-08-16  	MDKSA-2006:143  	Updated Firefox packages fix multiple=20
> > vulnerabilities
>=20
> Oh.  Now I see it.  Why is there a September 9 update
> listed?:
>=20
> 2006-09-09  	MDKSA-2006:139  	Updated krb5 packages fix local
> privilege escalation vulnerability
>=20
> Is the apparently incorrect date something that can be
> fixed?

Yup, it's fixed now.

And the staleness is due to some issue with ssh and keys running out of
at... for some reason it worked before and now it doesn't work and I
haven't had time to look into it yet, so the web syncing is done
manually and we sometimes forget.

Anyways, there's very little we can do about some of these issues.
You'll also note that LE2005 is listed as a still-supported product when
it isn't (I've asked a few times now for that to be updated).

--=20
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
mysql> SELECT * FROM users WHERE clue > 0;
Empty set (0.00sec)

--P6PRkhImOxklJvkF
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFE5L1HLrxeMv7jCtQRAjwsAJ4rOh1cBIowUOc7VUq16Ke0J//b0QCfW1fe
hymYPjX+1YxNkzLnw51MFRk=
=TqIV
-----END PGP SIGNATURE-----

--P6PRkhImOxklJvkF--