-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 3 Sep 2006 17:44:10 -0600 Source: kernel-image-2.4.27-i386 Binary: kernel-image-2.4.27-3-686 kernel-image-2.4.27-3-586tsc kernel-image-2.4.27-3-k6 kernel-headers-2.4.27-3-586tsc kernel-headers-2.4.27-3-k7-smp kernel-headers-2.4.27-3-k7 kernel-pcmcia-modules-2.4.27-3-k6 kernel-headers-2.4.27-3 kernel-pcmcia-modules-2.4.27-3-386 kernel-headers-2.4.27-3-386 kernel-image-2.4.27-3-386 kernel-image-2.4.27-3-686-smp kernel-pcmcia-modules-2.4.27-3-k7-smp kernel-pcmcia-modules-2.4.27-3-k7 kernel-build-2.4.27-3 kernel-headers-2.4.27-3-686 kernel-headers-2.4.27-3-k6 kernel-image-2.4.27-3-k7-smp kernel-pcmcia-modules-2.4.27-3-686-smp kernel-image-2.4.27-3-k7 kernel-pcmcia-modules-2.4.27-3-586tsc kernel-pcmcia-modules-2.4.27-3-686 kernel-headers-2.4.27-3-686-smp Architecture: source i386 Version: 2.4.27-10sarge4 Distribution: stable-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: kernel-build-2.4.27-3 - Headers for building modules for Linux 2.4.27 kernel-headers-2.4.27-3 - Header files related to Linux kernel version 2.4.27 kernel-headers-2.4.27-3-386 - Linux 2.4.27 kernel headers for 386 kernel-headers-2.4.27-3-586tsc - Linux 2.4.27 kernel headers for Pentium-Classic kernel-headers-2.4.27-3-686 - Linux 2.4.27 kernel headers for PPro/Celeron/PII/PIII/P4 kernel-headers-2.4.27-3-686-smp - Linux 2.4.27 kernel headers for PPro/Celeron/PII/PIII/P4 SMP kernel-headers-2.4.27-3-k6 - Linux 2.4.27 kernel headers for AMD K6/K6-II/K6-III kernel-headers-2.4.27-3-k7 - Linux 2.4.27 kernel headers for AMD K7 kernel-headers-2.4.27-3-k7-smp - Linux 2.4.27 kernel headers for AMD K7 SMP kernel-image-2.4.27-3-386 - Linux kernel image for version 2.4.27 on 386 kernel-image-2.4.27-3-586tsc - Linux kernel image for version 2.4.27 on Pentium-Classic kernel-image-2.4.27-3-686 - Linux kernel image for version 2.4.27 on PPro/Celeron/PII/PIII/P4 kernel-image-2.4.27-3-686-smp - Linux kernel image for version 2.4.27 on PPro/Celeron/PII/PIII/P4 kernel-image-2.4.27-3-k6 - Linux kernel image for version 2.4.27 on AMD K6/K6-II/K6-III kernel-image-2.4.27-3-k7 - Linux kernel image for version 2.4.27 on AMD K7 kernel-image-2.4.27-3-k7-smp - Linux kernel image for version 2.4.27 on AMD K7 SMP kernel-pcmcia-modules-2.4.27-3-386 - Mainstream PCMCIA modules 2.4.27 on 386 kernel-pcmcia-modules-2.4.27-3-586tsc - Mainstream PCMCIA modules 2.4.27 on Pentium-Classic kernel-pcmcia-modules-2.4.27-3-686 - Mainstream PCMCIA modules 2.4.27 on PPro/Celeron/PII/PIII/P4 kernel-pcmcia-modules-2.4.27-3-686-smp - Mainstream PCMCIA modules 2.4.27 on PPro/Celeron/PII/PIII/P4 SMP kernel-pcmcia-modules-2.4.27-3-k6 - Mainstream PCMCIA modules 2.4.27 on AMD K6/K6-II/K6-III kernel-pcmcia-modules-2.4.27-3-k7 - Mainstream PCMCIA modules 2.4.27 on AMD K7 kernel-pcmcia-modules-2.4.27-3-k7-smp - Mainstream PCMCIA modules 2.4.27 on AMD K7 SMP Changes: kernel-image-2.4.27-i386 (2.4.27-10sarge4) stable-security; urgency=high . * Build against kernel-tree-2.4.27-10sarge4: * [ERRATA] 213_madvise_remove-restrict.diff [SECURITY] The 2.4.27-10sarge3 changelog associated this patch with CVE-2006-1524. However, this patch fixes an mprotect issue that was split off from the original report into CVE-2006-2071. 2.4.27 is not vulnerable to CVE-2006-1524 the madvise_remove issue. See CVE-2006-2071 * 223_nfs-handle-long-symlinks.diff [SECURITY] Fix buffer overflow in NFS readline handling that allows a remote server to cause a denial of service (crash) via a long symlink See CVE-2005-4798 * 224_cdrom-bad-cgc.buflen-assign.diff [SECURITY] Fix buffer overflow in dvd_read_bca which could potentially be used by a local user to trigger a buffer overflow via a specially crafted DVD, USB stick, or similar automatically mounted device. See CVE-2006-2935 * 225_sg-no-mmap-VM_IO.diff [SECURITY] Fix DoS vulnerability whereby a local user could attempt a dio/mmap and cause the sg driver to oops. See CVE-2006-1528 * 226_snmp-nat-mem-corruption-fix.diff [SECURITY] Fix memory corruption in snmp_trap_decode See CVE-2006-2444 * 227_kfree_skb.diff [SECURITY] Fix race between kfree_skb and __skb_unlink See CVE-2006-2446 * 228_sparc-mb-extraneous-semicolons.diff Fix a syntax error caused by extranous semicolons in smp_mb() macros which resulted in a build failure with 227_kfree_skb.diff * 229_sctp-priv-elevation.diff, 230_sctp-priv-elevation-2.diff [SECURITY] Fix SCTP privelege escalation See CVE-2006-3745 * 231_udf-deadlock.diff [SECURITY] Fix possible UDF deadlock and memory corruption See CVE-2006-4145 * 232_sparc-membar-extraneous-semicolons.diff Fix an additional syntax error caused by extraneous semicolons in membar macros on sparc Files: 01aef428bb7beb4c4b85ead4f7560647 1581 devel optional kernel-image-2.4.27-i386_2.4.27-10sarge4.dsc f88a415582bc8ab14077618daadaaac2 99332 devel optional kernel-image-2.4.27-i386_2.4.27-10sarge4.tar.gz b20eeb3c509ba498bebc9e715491b456 11051542 base optional kernel-image-2.4.27-3-386_2.4.27-10sarge4_i386.deb 602c8ca8fb370ee253db8336f26c99c7 10110 devel optional kernel-build-2.4.27-3_2.4.27-10sarge4_i386.deb 87dde248ef2f3fc8b54b318b6b300bc0 288252 base optional kernel-pcmcia-modules-2.4.27-3-k6_2.4.27-10sarge4_i386.deb f85e32d1715f76577e0012a393a8aa53 299096 base optional kernel-pcmcia-modules-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb 65d58be41a7887ea54af9627e454232f 12352942 base optional kernel-image-2.4.27-3-686_2.4.27-10sarge4_i386.deb 3e5f1d99455c3d8fb148d0385eb50dbe 269552 base optional kernel-pcmcia-modules-2.4.27-3-386_2.4.27-10sarge4_i386.deb 90f3bf91543bae03fc9a58b7da0cbbd2 300280 base optional kernel-pcmcia-modules-2.4.27-3-686_2.4.27-10sarge4_i386.deb da5f7095dd33c721a38893502e625979 1824668 devel optional kernel-headers-2.4.27-3_2.4.27-10sarge4_i386.deb 0289fe967373e95f580b770c85b1d23a 11722988 base optional kernel-image-2.4.27-3-k6_2.4.27-10sarge4_i386.deb 07275530155e3c813ad444d94484284d 12692654 base optional kernel-image-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb 9e1a30002ad3880b2060210b7d2208aa 299722 devel optional kernel-headers-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb f91cb833aa97fa8a24529ae40343fd24 12095314 base optional kernel-image-2.4.27-3-k7_2.4.27-10sarge4_i386.deb 883ff5c2940b58e2add0da99249f3af7 306010 base optional kernel-pcmcia-modules-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb 8e1456b82b4402781c285f1b9e8011f8 299656 devel optional kernel-headers-2.4.27-3-k7_2.4.27-10sarge4_i386.deb f0a217bab1ef540c24d48a90e6b266bf 301510 devel optional kernel-headers-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb f76659d1243043578de452963ede6e46 299878 devel optional kernel-headers-2.4.27-3-686_2.4.27-10sarge4_i386.deb 40eba95c72df0de2be570161bc0d46bb 299110 devel optional kernel-headers-2.4.27-3-k6_2.4.27-10sarge4_i386.deb 6dab70747a06a41255021d7e1285acd5 298730 devel optional kernel-headers-2.4.27-3-386_2.4.27-10sarge4_i386.deb 713aaebe3caf1c8d34d8863b2df483dd 294146 base optional kernel-pcmcia-modules-2.4.27-3-k7_2.4.27-10sarge4_i386.deb 3ed90f48e0bc6e3122acd6d9f1e2d393 294448 base optional kernel-pcmcia-modules-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb 7918144e5aa082597a924bd586faba2c 12035042 base optional kernel-image-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb dc6e39a89aed9d04aa96e77992741d29 12433462 base optional kernel-image-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb 34dfd2fbc0d0957dac92cfe4485a7563 301494 devel optional kernel-headers-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFDtvFhuANDBmkLRkRAkgtAJ4zYk5jBWdtcXGQWf8S1Zcd/T2bcQCeNH/w 8R1zZriJROpVHGUv/wry0pA= =3mzy -----END PGP SIGNATURE----- Accepted: kernel-build-2.4.27-3_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-build-2.4.27-3_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-386_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-386_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-686_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-686_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-k6_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-k6_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3-k7_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3-k7_2.4.27-10sarge4_i386.deb kernel-headers-2.4.27-3_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-headers-2.4.27-3_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-386_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-386_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-686_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-686_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-k6_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-k6_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-3-k7_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-3-k7_2.4.27-10sarge4_i386.deb kernel-image-2.4.27-i386_2.4.27-10sarge4.dsc to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-i386_2.4.27-10sarge4.dsc kernel-image-2.4.27-i386_2.4.27-10sarge4.tar.gz to pool/main/k/kernel-image-2.4.27-i386/kernel-image-2.4.27-i386_2.4.27-10sarge4.tar.gz kernel-pcmcia-modules-2.4.27-3-386_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-386_2.4.27-10sarge4_i386.deb kernel-pcmcia-modules-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-586tsc_2.4.27-10sarge4_i386.deb kernel-pcmcia-modules-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-686-smp_2.4.27-10sarge4_i386.deb kernel-pcmcia-modules-2.4.27-3-686_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-686_2.4.27-10sarge4_i386.deb kernel-pcmcia-modules-2.4.27-3-k6_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-k6_2.4.27-10sarge4_i386.deb kernel-pcmcia-modules-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-k7-smp_2.4.27-10sarge4_i386.deb kernel-pcmcia-modules-2.4.27-3-k7_2.4.27-10sarge4_i386.deb to pool/main/k/kernel-image-2.4.27-i386/kernel-pcmcia-modules-2.4.27-3-k7_2.4.27-10sarge4_i386.deb