Bug#787347: License is wrong in file

This from the digikam-users email list. This bug can be closed as 'Not a bug' Andrew On 24/06/2015 13:38, Alan Pater wrote: > Looks like a bogus bug report then. I don't see any license in the svg > files either. In fact, they inherit the GPL license from libkipi. > It does look like the files

Bug#707776: Why is 4.10.5 marked as vulnerable, fix was in 4.10.4?

The upstream fixes mentioned in [1] appear to have gone into 4.10.4. Looking at the Debian source [2] for the package in Sid, ie 4.10.5 shows the fixes included. So why does CVE-2013-2074 [3] show sid as vulnerable? [1] https://bugs.kde.org/show_bug.cgi?id=319428 [2] http://sources.debian.net