-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 3 Sep 2006 17:51:46 -0600 Source: kernel-image-2.4.27-ia64 Binary: kernel-image-2.4.27-3-itanium kernel-image-2.4-mckinley-smp kernel-image-2.4.27-3-itanium-smp kernel-image-2.4-itanium kernel-headers-2.4.27-3-mckinley kernel-image-2.4.27-3-mckinley-smp kernel-build-2.4.27-3 kernel-headers-2.4.27-3-mckinley-smp kernel-image-2.4-itanium-smp kernel-image-2.4-mckinley kernel-headers-2.4.27-3 kernel-image-2.4.27-3-mckinley kernel-headers-2.4.27-3-itanium kernel-headers-2.4.27-3-itanium-smp Architecture: source ia64 Version: 2.4.27-10sarge4 Distribution: stable-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: kernel-build-2.4.27-3 - Headers for building modules for Linux 2.4.27 kernel-headers-2.4.27-3 - Header files related to Linux kernel version 2.4.27 kernel-headers-2.4.27-3-itanium - Linux kernel headers 2.4.27 on ia64 kernel-headers-2.4.27-3-itanium-smp - Linux kernel headers 2.4.27 on Itanium SMP kernel-headers-2.4.27-3-mckinley - Linux kernel headers 2.4.27 on ia64 kernel-headers-2.4.27-3-mckinley-smp - Linux kernel headers 2.4.27 on Itanium II SMP kernel-image-2.4-itanium - Linux kernel image for version 2.4 on Itanium kernel-image-2.4-itanium-smp - Linux kernel image for version 2.4 on Itanium SMP kernel-image-2.4-mckinley - Linux kernel image for version 2.4 on Itanium II kernel-image-2.4-mckinley-smp - Linux kernel image for version 2.4 on Itanium II SMP kernel-image-2.4.27-3-itanium - Linux kernel image for version 2.4.27 on Itanium kernel-image-2.4.27-3-itanium-smp - Linux kernel image for version 2.4.27 on Itanium SMP kernel-image-2.4.27-3-mckinley - Linux kernel image for version 2.4.27 on Itanium II kernel-image-2.4.27-3-mckinley-smp - Linux kernel image for version 2.4.27 on Itanium II SMP Changes: kernel-image-2.4.27-ia64 (2.4.27-10sarge4) stable-security; urgency=high . * Build against kernel-tree-2.4.27-10sarge4: * [ERRATA] 213_madvise_remove-restrict.diff [SECURITY] The 2.4.27-10sarge3 changelog associated this patch with CVE-2006-1524. However, this patch fixes an mprotect issue that was split off from the original report into CVE-2006-2071. 2.4.27 is not vulnerable to CVE-2006-1524 the madvise_remove issue. See CVE-2006-2071 * 223_nfs-handle-long-symlinks.diff [SECURITY] Fix buffer overflow in NFS readline handling that allows a remote server to cause a denial of service (crash) via a long symlink See CVE-2005-4798 * 224_cdrom-bad-cgc.buflen-assign.diff [SECURITY] Fix buffer overflow in dvd_read_bca which could potentially be used by a local user to trigger a buffer overflow via a specially crafted DVD, USB stick, or similar automatically mounted device. See CVE-2006-2935 * 225_sg-no-mmap-VM_IO.diff [SECURITY] Fix DoS vulnerability whereby a local user could attempt a dio/mmap and cause the sg driver to oops. See CVE-2006-1528 * 226_snmp-nat-mem-corruption-fix.diff [SECURITY] Fix memory corruption in snmp_trap_decode See CVE-2006-2444 * 227_kfree_skb.diff [SECURITY] Fix race between kfree_skb and __skb_unlink See CVE-2006-2446 * 228_sparc-mb-extraneous-semicolons.diff Fix a syntax error caused by extranous semicolons in smp_mb() macros which resulted in a build failure with 227_kfree_skb.diff * 229_sctp-priv-elevation.diff, 230_sctp-priv-elevation-2.diff [SECURITY] Fix SCTP privelege escalation See CVE-2006-3745 * 231_udf-deadlock.diff [SECURITY] Fix possible UDF deadlock and memory corruption See CVE-2006-4145 * 232_sparc-membar-extraneous-semicolons.diff Fix an additional syntax error caused by extraneous semicolons in membar macros on sparc Files: 43ad8f588032f8e388251589d81a90ae 1143 devel optional kernel-image-2.4.27-ia64_2.4.27-10sarge4.dsc 292ecbc0d7503145a1ddaa8a230643f4 55153 devel optional kernel-image-2.4.27-ia64_2.4.27-10sarge4.tar.gz 15424feb7e8d7197b446bc1d7f262f01 17033308 base optional kernel-image-2.4.27-3-itanium-smp_2.4.27-10sarge4_ia64.deb 8819e9547726fb46d789fb79ee4972b8 4689188 devel optional kernel-headers-2.4.27-3_2.4.27-10sarge4_ia64.deb b0727c1d58545f67348da625615c6959 16676426 base optional kernel-image-2.4.27-3-itanium_2.4.27-10sarge4_ia64.deb 776a1bf241883d1c568a84a753ee3eab 6874 base optional kernel-image-2.4-mckinley-smp_2.4.27-10sarge4_ia64.deb 2f409b542f17fef3d0648f894dcccb99 16628074 base optional kernel-image-2.4.27-3-mckinley_2.4.27-10sarge4_ia64.deb ac95d0b4257544a67458180f58904168 7058 devel optional kernel-build-2.4.27-3_2.4.27-10sarge4_ia64.deb 641d59723ee16c39060a582733942052 242848 devel optional kernel-headers-2.4.27-3-itanium-smp_2.4.27-10sarge4_ia64.deb 6061b8a357fe2c78c65d11171a234031 242750 devel optional kernel-headers-2.4.27-3-mckinley-smp_2.4.27-10sarge4_ia64.deb 8b098d01b8dc91fc9fd24158299835c5 242178 devel optional kernel-headers-2.4.27-3-itanium_2.4.27-10sarge4_ia64.deb 7bc187acabee9b6f036674f77f531435 6858 base optional kernel-image-2.4-mckinley_2.4.27-10sarge4_ia64.deb d30b496f7f7b5bd63f5c3af74a2b0bfc 6838 base optional kernel-image-2.4-itanium-smp_2.4.27-10sarge4_ia64.deb 04ec0557d7babf7d2f6faed8a4f1dafb 16986728 base optional kernel-image-2.4.27-3-mckinley-smp_2.4.27-10sarge4_ia64.deb 5043864a5e6270796fc1dbb4b48e4e87 241912 devel optional kernel-headers-2.4.27-3-mckinley_2.4.27-10sarge4_ia64.deb 34f798cebe568b05b68730248db1fac7 6830 base optional kernel-image-2.4-itanium_2.4.27-10sarge4_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFCXQNhuANDBmkLRkRAm3eAKCIH4HvlYqpvNccGLAgZKMYdy84PwCfXm75 031poeRS2MgRi6xd9av7stM= =K+Zf -----END PGP SIGNATURE----- Accepted: kernel-build-2.4.27-3_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-build-2.4.27-3_2.4.27-10sarge4_ia64.deb kernel-headers-2.4.27-3-itanium-smp_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-headers-2.4.27-3-itanium-smp_2.4.27-10sarge4_ia64.deb kernel-headers-2.4.27-3-itanium_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-headers-2.4.27-3-itanium_2.4.27-10sarge4_ia64.deb kernel-headers-2.4.27-3-mckinley-smp_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-headers-2.4.27-3-mckinley-smp_2.4.27-10sarge4_ia64.deb kernel-headers-2.4.27-3-mckinley_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-headers-2.4.27-3-mckinley_2.4.27-10sarge4_ia64.deb kernel-headers-2.4.27-3_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-headers-2.4.27-3_2.4.27-10sarge4_ia64.deb kernel-image-2.4-itanium-smp_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4-itanium-smp_2.4.27-10sarge4_ia64.deb kernel-image-2.4-itanium_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4-itanium_2.4.27-10sarge4_ia64.deb kernel-image-2.4-mckinley-smp_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4-mckinley-smp_2.4.27-10sarge4_ia64.deb kernel-image-2.4-mckinley_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4-mckinley_2.4.27-10sarge4_ia64.deb kernel-image-2.4.27-3-itanium-smp_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4.27-3-itanium-smp_2.4.27-10sarge4_ia64.deb kernel-image-2.4.27-3-itanium_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4.27-3-itanium_2.4.27-10sarge4_ia64.deb kernel-image-2.4.27-3-mckinley-smp_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4.27-3-mckinley-smp_2.4.27-10sarge4_ia64.deb kernel-image-2.4.27-3-mckinley_2.4.27-10sarge4_ia64.deb to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4.27-3-mckinley_2.4.27-10sarge4_ia64.deb kernel-image-2.4.27-ia64_2.4.27-10sarge4.dsc to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4.27-ia64_2.4.27-10sarge4.dsc kernel-image-2.4.27-ia64_2.4.27-10sarge4.tar.gz to pool/main/k/kernel-image-2.4.27-ia64/kernel-image-2.4.27-ia64_2.4.27-10sarge4.tar.gz