Re: CVE-2009-3623

[Michael Gilbert <michael.s.gilbert@gmail.com>]

On Mon, 02 Nov 2009 12:04:11 +0100, Laurent Bonnaud wrote:
> Hi,
> 
> I am looking at this security issue:
> 
>   http://security-tracker.debian.org/tracker/CVE-2009-3623
> 
> where the sid version is marked as vulnerable.
> 
> According to the description, it should be fixed in linux 2.6.31.2 and
> beyond.  Since version 2.6.31-1 in sid is based on 2.6.31.5:
> 
> http://packages.debian.org/changelogs/pool/main/l/linux-2.6/linux-2.6_2.6.31-1/changelog
> 
> this security hole should be fixed in sid.  Could somebody fix this ?

fixed.  note that cve descriptions are not always trustworthy, but in
this case, i've checked, and the text is correct.  the flaw is indeed
fixed in 2.6.31.2, which is included in sid's 2.6.31-1.

thanks for spotting this!

mike