[USN-1025-1] Bind vulnerabilities

[Marc Deslauriers]

On Wed, 2010-12-01 at 15:07 -0800, MR ZenWiz wrote:
> On Wed, Dec 1, 2010 at 11:39 AM, Marc Deslauriers
> <marc.deslauriers at canonical.com> wrote:
> > ===========================================================
> > Ubuntu Security Notice USN-1025-1          December 01, 2010
> > bind9 vulnerabilities
> > CVE-2010-3613, CVE-2010-3614
> > ===========================================================
> >
> Just out of curiosity, roughly how long after these notices go out do
> they become active?
> 
> I've noticed that if I try to do an update within a short time (e.g.,
> hours rather than days) they don't seem to be effective.  For example,
> the new kernel that came in on an update yesterday evening (PST) was
> not available earlier in the day shortly after the announcement came
> through on the list.

I send these out once the update hits the main Ubuntu archive. It takes
a while for mirrors to sync with the main archive. The length of time
depends on which local mirror you are using.

Marc.