Re: [SECURITY] [DSA 2264-1] linux-2.6 security update

2011-06-18 Thread Eric d'Halibut
Hi Dann, PMFJI... On 6/18/11, dann frazier wrote: > However, given the high frequency at which low-severity security > issues are discovered in the kernel and the resource requirements of > doing an update, updates for lower priority issues will normally not > be released for all kernels at the

Re: CVE-2011-1071 / #615120 - security fix in stable?

2011-06-18 Thread Aurelien Jarno
On Thu, Jun 16, 2011 at 11:38:16AM +0200, Arne Wichmann wrote: > Hi, Hi, > I see that CVE-2011-1071 (#615120) is done in testing - shouldn't it be > fixed in stable, too? > This bug is already fixed in our stable SVN. After discussion with the release team, It will be uploaded for the 6.0.3 re

Re: CVE-2011-1071 / #615120 - security fix in stable?

2011-06-18 Thread Michael Gilbert
Arne Wichmann wrote: > Hi, > > I see that CVE-2011-1071 (#615120) is done in testing - shouldn't it be > fixed in stable, too? Yes, Debian security is done by volunteers with limited time, so the best way to get things fixed is to volunteer to do the work yourself (especially in cases like this