Cucumber Linux Security Advisory and Bug Tracker - Color Code Key

This bug/vulnerability has been fixed in this version of Cucumber Linux. This means that if you are keeping all of your packages up to date with the master mirror (http://mirror.cucumberlinux.com/cucumber/), your system will not be vulnerable; however, a full, clean installation of this version of Cucumber Linux will be vulnerable.

The details page for this vulnerability will show what specific package version this vulnerability/bug was fixed in.

Yellow can mean one of two things:

1. We don't know if this version is affected.

This means we don't know if this bug/vulnerability affects this version of Cucumber Linux. If this is the case, the text in yellow box will start with either "awaiting analysis" or "unknown". If it says "awaiting analysis", that means we have just added the this entry to our tracker and have not yet analyzed it; its status will likely change in a few hours. If it says "unknown", that means that there is not enough information available about the bug/vulnerability for us to tell whether or not this version of Cucumber Linux is affected.

2. This bug/vulnerability has been partially fixed.

This means that we have done something to mitigate the impact of this bug/vulnerability; however, it has not been entirely fixed. In this case, the text in the yellow box will start with "partially fixed" and the details page will show what specific package version this bug/vulnerability was mitigated in.

This means that this version of Cucumber Linux is vulnerable to this bug/vulnerability. The text in the red box will start with either "vulnerable" or "waiting". If it starts with "vulnerable", that means this version of Cucumber Linux is vulnerable to this bug/vulnerability and we are working to fix it. If it starts with "waiting", that means we are waiting for someone to do something upstream before we can fix it (usually this means we are waiting for the upstream developers to publish a patch).