Unannounced kernel update today? (etch)

2008-08-22 Thread nate
My systems informed me of a kernel update today, but
I can't find any indication either on the security web site
or the security-announce list that there has been one recently.

The changelog for the package says:

linux-2.6 (2.6.18.dfsg.1-22etch2) stable-security; urgency=high

  * bugfix/x86-wrong-register-was-used-in-align-macro.patch
Fix regression introduced upstream by the fix for CVE-2008-0598
  * bugfix/cifs-fix-compiler-warning.patch,
bugfix/netfilter-nf_nat_snmp_basic-fix-range-check.patch
Fix regressions introduced upstream by the fixes for CVE-2008-1673
  *
bugfix/sound-ensure-device-number-is-valid-in-snd_seq_oss_synth_make_info.patch
Fix possible information leak in seq_oss_synth.c
See CVE-2008-3272
  * bugfix/vfs-fix-lookup-on-deleted-directory.patch
Fix potential memory leak in lookup path
See CVE-2008-3275

 -- dann frazier [EMAIL PROTECTED]  Mon, 18 Aug 2008 01:43:55 -0600


The last security kernel I see announced is from June 9th.

I run my own local repositories, mirrored using rsync(sync once
a day) -

debmirror -v --nosource --method=rsync -r :debian -h mirrors.kernel.org
--dist=etch /storage/debian/mirror/base
debmirror -v --nosource --method=rsync -r :debian-security -h
security.debian.org --dist=etch
--section=updates/main,updates/contrib,updates/non-free
--ignore-missing-release --ignore-release-gpg
/storage/debian/mirror/security

rsync -av
rsync://security.debian.org/debian-security/dists/etch/updates/Release*
/storage/debian/mirror/security/dists/etch/updates/


Maybe I'm just being overly paranoid ?

thanks

nate
(been a few years since I've been on the list, still waiting
for the list confirmation message that I'm subscribed)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Unannounced kernel update today? (etch)

2008-08-22 Thread Eduardo M KALINOWSKI

nate escreveu:

My systems informed me of a kernel update today, but
I can't find any indication either on the security web site
or the security-announce list that there has been one recently.
  


It was announced: 
http://lists.debian.org/debian-security-announce/2008/msg00216.html .



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Unannounced kernel update today? (etch)

2008-08-22 Thread Sven Hoexter
On Fri, Aug 22, 2008 at 08:26:30AM -0700, nate wrote:
 My systems informed me of a kernel update today, but
 I can't find any indication either on the security web site
 or the security-announce list that there has been one recently.

On the website it seems to be still missing but the mailinglist archive
has it.
http://lists.debian.org/debian-security-announce/2008/msg00216.html

Sven
-- 
If God passed a mic to me to speak
I'd say stay in bed, world
Sleep in peace
   [The Cardigans - 03:45: No sleep]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Unannounced kernel update today? (etch)

2008-08-22 Thread nate
Sven Hoexter wrote:
 On Fri, Aug 22, 2008 at 08:26:30AM -0700, nate wrote:
 My systems informed me of a kernel update today, but
 I can't find any indication either on the security web site
 or the security-announce list that there has been one recently.

 On the website it seems to be still missing but the mailinglist archive
 has it.
 http://lists.debian.org/debian-security-announce/2008/msg00216.html

Ahh, ok thanks! I checked the archives but for some reason didn't
see it(I think I was doing a top-down search rather than bottom up)

nate


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]