Re: [SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation

["Michael S. Gilbert" <michael.s.gilbert@gmail.com>]

On 18 Aug 2009 10:54:04 GMT, Harald Weidner wrote:
> Hello,
> 
> "Michael S. Gilbert" <michael.s.gilbert@gmail.com>:
> 
> >> Will there also be a fix for etch's 2.6.18 kernel?
> >
> >yes, dsa-1865 was issued for etch's 2.6.18 yesterday.
> 
> Thank you.
> 
> I was confused because the 2.6.18 fix was not mentioned on
> http://www.debian.org/security/ .
> 
> I know that not all the security announcements go there, but why is
> the 2.6.24 fix listed but 2.6.18 is not? Is 2.6.24 considered as the
> 'default' etch kernel?

sometimes the webscripts fail when the DSA is not formatted correctly.
you can send an email to the www team if a DSA does not show up.  there
has already been some discussion to make DSA preparers better aware of
the requirements of the webscripts.

mike