-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 4 Sep 2006 23:13:08 -0600 Source: kernel-image-2.4.27-sparc Binary: kernel-image-2.4.27-3-sparc64 kernel-image-2.4.27-3-sparc64-smp kernel-headers-2.4.27-3-sparc32 kernel-headers-2.4.27-3 kernel-headers-2.4.27-3-sparc32-smp kernel-build-2.4.27-3 kernel-image-2.4.27-3-sparc32-smp kernel-image-2.4.27-3-sparc32 kernel-headers-2.4.27-3-sparc64 kernel-headers-2.4.27-3-sparc64-smp Architecture: source sparc Version: 2.4.27-9sarge4 Distribution: stable-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: kernel-build-2.4.27-3 - Headers for building modules for Linux 2.4.27 kernel-headers-2.4.27-3 - Header files related to Linux kernel version 2.4.27 kernel-headers-2.4.27-3-sparc32 - Header files for Linux kernel 2.4.27 on uniprocessor 32-bit SPARC kernel-headers-2.4.27-3-sparc32-smp - Header files for Linux kernel 2.4.27 on multiprocessor 32-bit SPA kernel-headers-2.4.27-3-sparc64 - Header files for Linux kernel 2.4.27 on uniprocessor 64-bit SPARC kernel-headers-2.4.27-3-sparc64-smp - Header files for Linux kernel 2.4.27 on multiprocessor 64-bit SPA kernel-image-2.4.27-3-sparc32 - Linux kernel binary image for sun4c, sun4m and sun4d kernel-image-2.4.27-3-sparc32-smp - Linux kernel binary image for SMP sun4m and sun4d kernel-image-2.4.27-3-sparc64 - Linux kernel binary image for UltraSPARC (sparc64) systems kernel-image-2.4.27-3-sparc64-smp - Linux kernel binary image for SMP UltraSPARC (sparc64) systems Changes: kernel-image-2.4.27-sparc (2.4.27-9sarge4) stable-security; urgency=high . * Build against kernel-tree-2.4.27-10sarge4: * [ERRATA] 213_madvise_remove-restrict.diff [SECURITY] The 2.4.27-10sarge3 changelog associated this patch with CVE-2006-1524. However, this patch fixes an mprotect issue that was split off from the original report into CVE-2006-2071. 2.4.27 is not vulnerable to CVE-2006-1524 the madvise_remove issue. See CVE-2006-2071 * 223_nfs-handle-long-symlinks.diff [SECURITY] Fix buffer overflow in NFS readline handling that allows a remote server to cause a denial of service (crash) via a long symlink See CVE-2005-4798 * 224_cdrom-bad-cgc.buflen-assign.diff [SECURITY] Fix buffer overflow in dvd_read_bca which could potentially be used by a local user to trigger a buffer overflow via a specially crafted DVD, USB stick, or similar automatically mounted device. See CVE-2006-2935 * 225_sg-no-mmap-VM_IO.diff [SECURITY] Fix DoS vulnerability whereby a local user could attempt a dio/mmap and cause the sg driver to oops. See CVE-2006-1528 * 226_snmp-nat-mem-corruption-fix.diff [SECURITY] Fix memory corruption in snmp_trap_decode See CVE-2006-2444 * 227_kfree_skb.diff [SECURITY] Fix race between kfree_skb and __skb_unlink See CVE-2006-2446 * 228_sparc-mb-extraneous-semicolons.diff Fix a syntax error caused by extranous semicolons in smp_mb() macros which resulted in a build failure with 227_kfree_skb.diff * 229_sctp-priv-elevation.diff, 230_sctp-priv-elevation-2.diff [SECURITY] Fix SCTP privelege escalation See CVE-2006-3745 * 231_udf-deadlock.diff [SECURITY] Fix possible UDF deadlock and memory corruption See CVE-2006-4145 * 232_sparc-membar-extraneous-semicolons.diff Fix an additional syntax error caused by extraneous semicolons in membar macros on sparc Files: efb105f7cdecd3eab73f29ba72cd5f8b 1074 devel optional kernel-image-2.4.27-sparc_2.4.27-9sarge4.dsc accdb4ce4bb6e551ac717b558ce30a29 24326 devel optional kernel-image-2.4.27-sparc_2.4.27-9sarge4.tar.gz 1abd15b240f7b7a6c3a2f245b69396b5 202354 devel optional kernel-headers-2.4.27-3-sparc64_2.4.27-9sarge4_sparc.deb aa1f8cf8b8ce570adecc45a2b1d75935 3603836 base optional kernel-image-2.4.27-3-sparc32_2.4.27-9sarge4_sparc.deb b7d97b37f35d18ef38e65407858db330 6383944 base optional kernel-image-2.4.27-3-sparc64_2.4.27-9sarge4_sparc.deb 84cd3c946a1b3dbe7c8ca248df33b19b 6549170 base optional kernel-image-2.4.27-3-sparc64-smp_2.4.27-9sarge4_sparc.deb fe43768fc817da675a784ecc53a78eb4 2024562 devel optional kernel-headers-2.4.27-3_2.4.27-9sarge4_sparc.deb 04e3a6d2bf535c163f28fcc75a7d296b 3791704 base optional kernel-image-2.4.27-3-sparc32-smp_2.4.27-9sarge4_sparc.deb efddcf277ffeb9b83f6cacbcdf6e3f64 163918 devel optional kernel-headers-2.4.27-3-sparc32_2.4.27-9sarge4_sparc.deb 59b85820309273cb2a3d4fb37ad675d1 10116 devel optional kernel-build-2.4.27-3_2.4.27-9sarge4_sparc.deb 5ecda633027cae3f0515ff7055371e12 165746 devel optional kernel-headers-2.4.27-3-sparc32-smp_2.4.27-9sarge4_sparc.deb 677b6e40982ec286185a02dfbadc2ec7 203690 devel optional kernel-headers-2.4.27-3-sparc64-smp_2.4.27-9sarge4_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFDty4huANDBmkLRkRAjUGAJ0bKqRdYMXgg17DbXjCOe515DoLUACffDUa 29D6Qr3TVoBaaWO49tHf2wc= =yX+l -----END PGP SIGNATURE----- Accepted: kernel-build-2.4.27-3_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-build-2.4.27-3_2.4.27-9sarge4_sparc.deb kernel-headers-2.4.27-3-sparc32-smp_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-headers-2.4.27-3-sparc32-smp_2.4.27-9sarge4_sparc.deb kernel-headers-2.4.27-3-sparc32_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-headers-2.4.27-3-sparc32_2.4.27-9sarge4_sparc.deb kernel-headers-2.4.27-3-sparc64-smp_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-headers-2.4.27-3-sparc64-smp_2.4.27-9sarge4_sparc.deb kernel-headers-2.4.27-3-sparc64_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-headers-2.4.27-3-sparc64_2.4.27-9sarge4_sparc.deb kernel-headers-2.4.27-3_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-headers-2.4.27-3_2.4.27-9sarge4_sparc.deb kernel-image-2.4.27-3-sparc32-smp_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-image-2.4.27-3-sparc32-smp_2.4.27-9sarge4_sparc.deb kernel-image-2.4.27-3-sparc32_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-image-2.4.27-3-sparc32_2.4.27-9sarge4_sparc.deb kernel-image-2.4.27-3-sparc64-smp_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-image-2.4.27-3-sparc64-smp_2.4.27-9sarge4_sparc.deb kernel-image-2.4.27-3-sparc64_2.4.27-9sarge4_sparc.deb to pool/main/k/kernel-image-2.4.27-sparc/kernel-image-2.4.27-3-sparc64_2.4.27-9sarge4_sparc.deb kernel-image-2.4.27-sparc_2.4.27-9sarge4.dsc to pool/main/k/kernel-image-2.4.27-sparc/kernel-image-2.4.27-sparc_2.4.27-9sarge4.dsc kernel-image-2.4.27-sparc_2.4.27-9sarge4.tar.gz to pool/main/k/kernel-image-2.4.27-sparc/kernel-image-2.4.27-sparc_2.4.27-9sarge4.tar.gz