Secure testing team - Mar 2006 - Stable Kernel issues

Martin Zobel-Helas wrote:
> I would do it, but i am on the LinuxWorldExpo in Frankfurt the next
> days and doing booth duties for debian. So help would be appreciated.
I''ll do.

Cheers,
        Moritz

* Martin Zobel-Helas:
> I asked Joey on #debian.de@OFTC about the current status of the stable
> kernels.  He stated, that most flaws were just fixed but not extended
> explaination was given.  What he said what can be done to help him is to
> give long term explainations for every CVE/CAN fixed in this kernel
> update.
I''ve been told that these explanations have already been posted to the
vendor-sec list in many cases.  I don''t have access to the list and
can''t tell how helpful that information would be, but I think we
should ask our vendor-sec members if we can somehow reuese this
information.  It''s not a clear CVE <-> patch mapping, AFAIUI, but
it
might complement the distilled information in the actual diffs.

Hi,

i just had a talk with Joey (Schulze) about the pending stable kernels.

Here is what we talked about (Translation below):

11/13/05 [19:48:33] < zobel> Joey: woran liegt es denn bei den kerneln
eigentlich noch? /me will ne antwort fuer die LWE parat haben...
11/13/05 [19:48:59] < zobel> weil: diese frage wird kommen.
11/13/05 [19:49:02] < Joey> Da sind (waren) viele Probleme nicht
klassifiziert, sondern einfach korrigiert worden.
11/13/05 [19:49:05] < Joey> Ist in Arbeit.
11/13/05 [19:49:31] < Ganneff> siehst du schon licht am ende des tunnels?
11/13/05 [19:49:44] < Ganneff> ie - die n?chsten, sage mehr mal, 2 -3
wochen ist was da? oder l?nger?
11/13/05 [19:49:44] < zobel> Joey: zu gut deutsch: du brauchst zu jedem
Patch die entsprechende CVE?
11/13/05 [19:49:51] < Joey> Das auch.
11/13/05 [19:50:00] < Joey> Ja, sehe ich.
11/13/05 [19:50:15] < Joey> (vorausgesetzt, ich werde nicht mit Problemen
geflutet in der Zwischenzeit)
11/13/05 [19:50:35] < zobel> Joey: kannst du dich mal aeussern, ob und wie
man dir dabei helfen kann?
11/13/05 [19:50:44] < Ganneff> die mussu nur richtig wegpriorisieren :)
11/13/05 [19:51:54] < Joey> zobel: im moment: Beschreibungen zu den
Patches liefern.
11/13/05 [19:52:11] < zobel> Joey: okay.

Translation (in short): 
I asked Joey on #debian.de@OFTC about the current status of the stable
kernels.  He stated, that most flaws were just fixed but not extended
explaination was given.  What he said what can be done to help him is to
give long term explainations for every CVE/CAN fixed in this kernel
update.

I would do it, but i am on the LinuxWorldExpo in Frankfurt the next
days and doing booth duties for debian. So help would be appreciated.

Greetings
Martin