[kernel-sec-discuss] r1774 - active

[dann frazier]

On Tue, Mar 09, 2010 at 11:38:56AM -0500, Michael Gilbert wrote:
> On Tue,  9 Mar 2010 16:20:42 +0000, Dann Frazier wrote:
> > Author: dannf
> > Date: 2010-03-09 16:20:40 +0000 (Tue, 09 Mar 2010)
> > New Revision: 1774
> > 
> > Modified:
> >    active/CVE-2010-0298
> > Log:
> > debian status
> > 
> > Modified: active/CVE-2010-0298
> > ===================================================================
> > --- active/CVE-2010-0298	2010-03-09 16:12:53 UTC (rev 1773)
> > +++ active/CVE-2010-0298	2010-03-09 16:20:40 UTC (rev 1774)
> > @@ -6,8 +6,8 @@
> >  Bugs:
> >  upstream: needed
> >  2.6.32-upstream-stable: needed
> > -linux-2.6: needed
> > +linux-2.6: released (2.6.32-8)
> >  2.6.18-etch-security: N/A "kvm introduced in 2.6.25"
> >  2.6.24-etch-security: N/A "kvm introduced in 2.6.25"
> > -2.6.26-lenny-security: needed
> > -2.6.32-squeeze-security: needed
> > +2.6.26-lenny-security: released (2.6.26-21lenny3)
> > +2.6.32-squeeze-security: released (2.6.32-8)
> 
> Dann,
> 
> i had recently checked against the patch that redhat says fixes this
> (in their bug report), and found it to not be present in any of the
> debian kernel source. is their information wrong?

What patch did you see?

The patches I used came from RH - they sent me a bundle that was
supposed to fix both this issue and CVE-2010-0306 and all were applied
in 21lenny3.