Hi everybody,

while looking at package asterisk [1], I see "1 security issue in trixie"
and "3 security issues in bookworm". This is a bit strange as asterisk
is neither available in trixie nor in bookworm. Do you have any idea what
went wrong here?

   Thorsten


[1] https://tracker.debian.org/pkg/asterisk

Here is another example:

https://tracker.debian.org/pkg/golang-github-notaryproject-notation-go

It says '1 security issue in trixie high' but the package has never been
part of any stable release.

Is there some metadata that is wrong triggering this to happen?

The link goes to
https://security-tracker.debian.org/tracker/CVE-2024-56138 and it looks
okay to me, with no references to trixie or stable.

/Simon