The odd saga of CVE-2012-5639

Just a note on the "missing" date for the linked Debian "report": that is not really a report. The security tracker imports any (or at least almost) any CVE affecting a Debian package. Additional data can be added through various means. But the date of the tracker page would always be the one of the original report.

As a paying customer here, I would hope LWN staff would know this, since Debian is one of the core Linux distributions, if not the most important one.