#1094675 security.debian.org: Apparent re-use of "DSA 5851-1" in some areas

#1094675#5
Date:
2025-01-30 01:59:07 UTC
From:
To:
Dear Maintainer,

In some areas, such as the webpage https://www.debian.org/security/ and the RSS
feed https://www.debian.org/security/dsa-long , it would appear that DSA 5851-1
was accidentally re-used for the package pdns-recursor when it should perhaps
have 5852-1 instead.

At https://lists.debian.org/debian-security-announce/2025/msg00014.html , the
DSA appears to be 5851-1 in the title, but 5852-1 in the message body.

In the RSS feed mentioned above, clicking the entry titled
"DSA-5851-1 openjpeg2" opens the above page which is apparently for
pdns-recursor. The RSS feed has no entry for msg00013.html, which actually
contains the DSA for openjpeg2.

(The RSS feed is how I noticed this issue.)

#1094675#12
Date:
2025-08-07 08:10:16 UTC
From:
To:
close 1094675
thanks

The subject of the mail cannot be recitified anymore once the mail is out. But
the metadata on security-tracker will link to the correct mail for DSA 5852-1.
As such there is little we can do here.

#1094675#17
Date:
2025-08-07 12:08:02 UTC
From:
To:

#1094675#22
Date:
2025-08-07 12:50:02 UTC
From:
To:
Hi,

The problem is that
https://security-tracker.debian.org/tracker/DSA-5851-1 -> links to
https://www.debian.org/security/dsa-5851-1 but the later due to the
wrong subject redirects to
https://lists.debian.org/debian-security-announce/2025/msg00014.html
instead of
https://lists.debian.org/debian-security-announce/2025/msg00013.html .

Whereas
https://security-tracker.debian.org/tracker/DSA-5852-1
https://www.debian.org/security/dsa-5852-1 goes to the right email in
the archive (with wrong subject).

So not on the security-tracker side but it should be possible to be
force overwritten in the wepages. I have made a MR for the Debian
webmasters team.

https://salsa.debian.org/webmaster-team/webwml/-/merge_requests/1057

Regards,
Salvatore