https://bugzilla.redhat.com/show_bug.cgi?id=624923 shows all 4 patches. (Plus a QA patch and an additional patch to fix a regression. The Ubuntu backport includes the regression fix). Patch 1/4 was missing from the CVE bulletin and I assume that's why it was missing from the initial backport.
For posterity, CVE-2010-2943 (http:// cve.mitre. org/cgi- bin/cvename. cgi?name= CVE-2010- 2943) only listed 3 patches despite the initial patch being a series of 4 commits.
https:/ /bugzilla. redhat. com/show_ bug.cgi? id=624923 shows all 4 patches. (Plus a QA patch and an additional patch to fix a regression. The Ubuntu backport includes the regression fix). Patch 1/4 was missing from the CVE bulletin and I assume that's why it was missing from the initial backport.