Re: CVEs for linux-2.6

[Michael Gilbert <michael.s.gilbert@gmail.com>]

On Mon, 16 Nov 2009 22:21:52 +0100, Francesco Poli wrote:
> On Mon, 16 Nov 2009 16:10:12 -0500 Michael Gilbert wrote:
> 
> > On Mon, 16 Nov 2009 21:07:53 +0100, Francesco Poli wrote:
> [...]
> > > it may be *suspected* that
> > > 
> > > http://security-tracker.debian.org/tracker/CVE-2009-2584
> [...]
> > > should be fixed in both squeeze and sid
> [...]
> > often, the cve texts are not trustworthy.
> 
> Yes, I am aware of this issue: that's why I said *suspected*!   ;-)
> 
> > however, in these case, i've
> > checked the patches, and the texts are correct.
> 
> Great!  :-)
> 
> > i have thus updated
> > the tracker.  thanks for catching these inconsistencies.
> 
> Thanks to you for updating the tracker!  :)
> 
> It seems that CVE-2009-2584 is still inconsistent, though.
> Could you please fix that, as well?

ok, so the cve text is actually wrong for that one.  it was never fixed
in the 2.6.30 series, but it has been fixed in 2.6.31.6.

mike