Hello All,
Was looking over Torque bugs (I have one I'm working on), and noticed these two which are fst_owner=Sparks:
https://bugzilla.redhat.com/show_bug.cgi?id=1098583
https://bugzilla.redhat.com/show_bug.cgi?id=1098584
They appear to be duplicates of each other. The both refer to the same CVE and say they cover EPEL-ALL (yet both list EL6 as version).
Am I missing something or are they duplicates? Or should one cover EL5?
Thanks, David
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
On Sat, Aug 23, 2014 at 10:03:59PM -0400, David Cafaro wrote:
Was looking over Torque bugs (I have one I'm working on), and noticed these two which are fst_owner=Sparks:
Yeah, I had grabbed them as a result of them being EPEL orphans.
https://bugzilla.redhat.com/show_bug.cgi?id=1098583
https://bugzilla.redhat.com/show_bug.cgi?id=1098584
They appear to be duplicates of each other. The both refer to the same CVE and say they cover EPEL-ALL (yet both list EL6 as version).
Because of limited functionality in BZ, when a vulnerability affects all EPEL versions a single ticket is opened (EPEL-ALL) but the version is the latest version seen (in this case el6).
Am I missing something or are they duplicates? Or should one cover EL5?
These do appear to be duplicates. This could have been a script error. Since these tickets were opened back in May I suspect the problem has been remedied but I'll verify. Thanks for bringing this to my attention.
- -- Eric
- -------------------------------------------------- Eric "Sparks" Christensen Fedora Project
sparks@fedoraproject.org - sparks@redhat.com 097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1 - --------------------------------------------------
security-team@lists.fedoraproject.org