[Secure-testing-team] Re: [Secure-testing-commits] r5803 - data/CVE

Moritz Muehlenhoff
Mon, 07 May 2007 18:21:51 -0000

Florian Weimer wrote:
> * Noah Meyerhans:
>
> > Modified:
> >    data/CVE/list
> > Log:
> > DSA-1287-1 fixes ldap-account-manager issues
>
> Is there are particular reason why you edit CVE/list instead of DSA/list?
> Just wondering.

Noah,
there''s an easier way to add DSAs: Simply add them to DSA/list and
they''re
added to CVE list by a script, which performs cross-references. I''ve
converted
the entry in revision 5805 for reference. This has a couple of advantages:
- A canonical list of DSA identifiers (DSA mapping are done with DSA/list
  as the unique identifier)
- Changes to affected CVEs/versions only need to be changed in one place

Cheers,
        Moritz