The security advisory does not mention these (the current 2.4.x kernels available in sarge), and the upstream fix is apparently not until 2.4.23.
Can we get an announcement as to the safety of these Debian packages? -- Nathanael Nerode <neroden at gcc.gnu.org> http://home.twcny.rr.com/nerode/neroden/fdl.html
