Re: [HEADSUP] Removing vulnerable packages

[Mark Davies <mark%ecs.vuw.ac.nz@localhost>]

On Friday 01 April 2011 22:47:30 Thomas Klausner wrote:
> The packages listed below were marked as vulnerable on January 1, 
2010

> kdegraphics-3.5.10 [will not remove, but patches welcome]
> kdelibs-3.5.10 [will not remove, but patches welcome]

As far as I can see, most of the open vulnerabilities against these 
two are actually WebKit reports that then some linux distributions 
have backported against kde3 but on multiple attempts to look I can't 
find the actual patches they've applied - I just get lost in their 
bug tracking systems or package systems.

cheers
mark