Re: [SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

[Moritz Muehlenhoff <jmm@inutil.org>]

On 2007-12-11, Jan Hetges <tran@ms20.net> wrote:
>
> --6TrnltStXW4iwmi0
> Content-Type: text/plain; charset=us-ascii
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> Hi
> On Mon, Dec 10, 2007 at 10:51:52PM -0700, dann frazier wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>=20
>> - -----------------------------------------------------------------------=
> ---
>> Debian Security Advisory DSA 1428-1                    security@debian.org
>> http://www.debian.org/security/                               dann frazier
>> December 10th, 2007                     http://www.debian.org/security/faq
>> - -----------------------------------------------------------------------=
> ---
>>=20
>> Package        : linux-2.6
>> Vulnerability  : several
>> Problem-Type   : local/remote
>> Debian-specific: no
>> CVE ID         : CVE-2007-3104 CVE-2007-4997 CVE-2007-5500
>
> is there a particular reason, holding this back for more than a week?

Sure: Testing, building it on other archs, rebuilding kernel-dependant
packages like FAI or UML, QA etc.

Cheers,
        Moritz