Re: [SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting

2 msg	Re: [SECURITY] [DSA 1517-1] New ldapscripts pac...
1 msg	Candidatura rete agenti \| Life - Bellaria
2 msg	AUTO: Janek Lünstedt ist außer Haus (Rückkehr a...
2 msg	Abwesenheit
1 msg	Science Journals on CDs!
2 msg	Re: [Sysadmins] [SECURITY] [DSA 1524-1] New krb...

Re: [SECURITY] [DSA 1523-1] New ikiwiki package...
\ Axel Beckert (18 Mar 2008)
. \ Ronny Adsetts (18 Mar 2008)
. . \ Axel Beckert (18 Mar 2008)
. . . \ Ronny Adsetts (18 Mar 2008)
. . . . \ Axel Beckert (18 Mar 2008)
. . . . \ Florian Weimer (18 Mar 2008)
. \ Johannes Wiedersich (18 Mar 2008)

2 msg	Updated Science Journals CDs!
4 msg	ia32-libs security support
1 msg	[Byte Support #141618]: [SECURITY] [DSA 1520-1]...
4 msg	Re: [SECURITY] [DSA 1516-1] New dovecot package...
65 msg	Is oldstable security support duration somethin...
1 msg	internetten kredi KARTI ile BAHiS
1 msg	Bug#469296: rxvt: [SECURITY] opens terminal on ...
1 msg	Dialaphone: Select A Track With A Flick Of Your...
9 msg	Re: [SECURITY] [DSA 1503-1] New Linux kernel 2....
2 msg	strange unhide-linux26 output
11 msg	ClamAV And unrar - Bug #465207
1 msg	Convite pessoal de Felippe Bueno
2 msg	Paulo Zambroza Oliveira quer ser seu amigo no S...

Subject:	Re: [SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting
Group:	Debian-security
From:	Florian Weimer
Date:	18 Mar 2008

* Ronny Adsetts:

> My understanding is that the security team don't generally provide
> updates for unstable. The DSA simply notes the unstable version in
> which the security hole was fixed.

Exactly, I looked at our records (and the ikiwiki homepage), and listed
the version that was reported there.

ikiwiki is a native packge (no "-" in the version number), and we took
too much time to process the update even though it was available (sorry
about that), that's why there appears to be a large discrepancy between
the reported version number and the current version in sid. However,
this must have already happened in the past, when the security impact of
a change was discovered only afterwards.

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster