-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 27 Sep 2007 12:53:36 -0600 Source: fai-kernels Binary: fai-kernels Architecture: source i386 Version: 1.17+etch.13etch3 Distribution: stable-security Urgency: high Maintainer: Holger Levsen <holger@debian.org> Changed-By: dann frazier <dannf@debian.org> Description: fai-kernels - special kernels for FAI (Fully Automatic Installation) Changes: fai-kernels (1.17+etch.13etch3) stable-security; urgency=high . * NMU by the Security Team * Rebuild against linux-source-2.6.18 (2.6.18.dfsg.1-13etch3): * bugfix/ptrace-handle-bogus-selector.patch, bugfix/fixup-trace_irq-breakage.patch [SECURITY] Handle an invalid LDT segment selector %cs (the xcs field) during ptrace single-step operations that can be used to trigger a NULL-pointer dereference causing an Oops. See CVE-2007-3731 * bugfix/prevent-stack-growth-into-hugetlb-region.patch [SECURITY] Prevent OOPS during stack expansion when the VMA crosses into address space reserved for hugetlb pages. See CVE-2007-3739 * bugfix/cifs-honor-umask.patch [SECURITY] Make CIFS honor a process' umask See CVE-2007-3740 * bugfix/amd64-zero-extend-32bit-ptrace.patch [SECURITY] Zero extend all registers after ptrace in 32-bit entry path. See CVE-2007-4573 * bugfix/jffs2-ACL-vs-mode-handling.patch [SECURITY] Write correct legacy modes to the medium on inode creation to prevent incorrect permissions upon remount. See CVE-2007-4849 Files: ae1bf8aadf49ec47235774fac7f5cb06 740 admin extra fai-kernels_1.17+etch.13etch3.dsc 9c94bc12cef25ab30b5a66035c7588a2 54342 admin extra fai-kernels_1.17+etch.13etch3.tar.gz 83786305ce1b91a606159a664067ada0 5500914 admin extra fai-kernels_1.17+etch.13etch3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFG/ATjhuANDBmkLRkRAtXgAJ9sn3HUlfz29kb+nWx5K7gd52eWIgCfcIop KOBgpsRfOapGwWUwnAGX4pk= =AukL -----END PGP SIGNATURE----- Accepted: fai-kernels_1.17+etch.13etch3.dsc to pool/main/f/fai-kernels/fai-kernels_1.17+etch.13etch3.dsc fai-kernels_1.17+etch.13etch3.tar.gz to pool/main/f/fai-kernels/fai-kernels_1.17+etch.13etch3.tar.gz fai-kernels_1.17+etch.13etch3_i386.deb to pool/main/f/fai-kernels/fai-kernels_1.17+etch.13etch3_i386.deb