-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 19 Feb 2008 01:37:42 -0700 Source: kernel-image-2.6.8-ia64 Binary: kernel-headers-2.6-itanium kernel-image-2.6.8-4-mckinley kernel-headers-2.6-mckinley-smp kernel-headers-2.6-mckinley kernel-headers-2.6.8-4-itanium kernel-image-2.6-mckinley-smp kernel-image-2.6.8-4-itanium-smp kernel-headers-2.6.8-4-mckinley kernel-image-2.6.8-4-itanium kernel-image-2.6-itanium kernel-image-2.6-mckinley kernel-headers-2.6.8-4 kernel-headers-2.6-itanium-smp kernel-image-2.6.8-4-mckinley-smp kernel-headers-2.6.8-4-itanium-smp kernel-image-2.6-itanium-smp kernel-headers-2.6.8-4-mckinley-smp Architecture: source ia64 Version: 2.6.8-15sarge1 Distribution: oldstable-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: kernel-headers-2.6-itanium - Linux kernel headers 2.6 on Itanium kernel-headers-2.6-itanium-smp - Linux kernel headers 2.6 on Itanium SMP kernel-headers-2.6-mckinley - Linux kernel headers 2.6 on Itanium II kernel-headers-2.6-mckinley-smp - Linux kernel headers 2.6 on Itanium II SMP kernel-headers-2.6.8-4 - Header files related to Linux kernel version 2.6.8 kernel-headers-2.6.8-4-itanium - Linux kernel headers 2.6.8 on Itanium kernel-headers-2.6.8-4-itanium-smp - Linux kernel headers 2.6.8 on Itanium SMP kernel-headers-2.6.8-4-mckinley - Linux kernel headers 2.6.8 on Itanium II kernel-headers-2.6.8-4-mckinley-smp - Linux kernel headers 2.6.8 on Itanium II SMP kernel-image-2.6-itanium - Linux kernel image for version 2.6 on Itanium kernel-image-2.6-itanium-smp - Linux kernel image for version 2.6 on Itanium SMP kernel-image-2.6-mckinley - Linux kernel image for version 2.6 on Itanium II kernel-image-2.6-mckinley-smp - Linux kernel image for version 2.6 on Itanium II SMP kernel-image-2.6.8-4-itanium - Linux kernel image for version 2.6.8 on Itanium kernel-image-2.6.8-4-itanium-smp - Linux kernel image for version 2.6.8 on Itanium SMP kernel-image-2.6.8-4-mckinley - Linux kernel image for version 2.6.8 on Itanium II kernel-image-2.6.8-4-mckinley-smp - Linux kernel image for version 2.6.8 on Itanium II SMP Changes: kernel-image-2.6.8-ia64 (2.6.8-15sarge1) oldstable-security; urgency=high . * Rebuild against kernel-tree-2.6.8-17sarge1 * compat_sys_mount-NULL-data_page.dpatch [SECURITY] Fix oops in compat_sys_mount triggered by NULL data_page See CVE-2006-7203 * pppoe-socket-release-mem-leak.dpatch [SECURITY] fix unpriveleged memory leak when a PPPoE socket is released after connect but before PPPIOCGCHAN ioctl is called upon it See CVE-2007-2525 * dn_fib-out-of-bounds.dpatch, ipv4-fib_props-out-of-bounds.dpatch [SECURITY] Fix out of bounds condition in dn_fib_props[] See CVE-2007-2172 * aacraid-ioctl-perm-check.dpatch [SECURITY] Require admin capabilities to issue ioctls to aacraid devices See CVE-2007-4308 * reset-pdeathsig-on-suid.dpatch [SECURITY] Fix potential privilege escalation caused by improper clearing of the child process' pdeath signal. See CVE-2007-3848 * bluetooth-l2cap-hci-info-leaks.dpatch [SECURITY] Fix information leaks in setsockopt() implementations See CVE-2007-1353 * coredump-only-to-same-uid.dpatch [SECURITY] Fix an issue where core dumping over a file that already exists retains the ownership of the original file See CVE-2007-6206 * i4l-isdn_ioctl-mem-overrun.dpatch [SECURITY] Fix potential isdn ioctl memory overrun See CVE-2007-6151 * cramfs-check-block-length.dpatch [SECURITY] Add a sanity check of the block length in cramfs_readpage to avoid a potential oops condition See CVE-2006-5823 * ext2-skip-pages-past-num-blocks.dpatch [SECURITY] Add some sanity checking for a corrupted i_size in ext2_find_entry() See CVE-2006-6054 * minixfs-printk-hang.dpatch [SECURITY] Rate-limit printks caused by accessing a corrupted minixfs filesystem that would otherwise cause a system to hang (printk storm) See CVE-2006-6058 * isdn-net-overflow.dpatch [SECURITY] Fix potential overflows in the ISDN subsystem See CVE-2007-6063 * prevent-stack-growth-into-hugetlb-region.dpatch [SECURITY] Prevent OOPS during stack expansion when the VMA crosses into address space reserved for hugetlb pages. See CVE-2007-3739 * cifs-honor-umask.dpatch [SECURITY] Make CIFS honor a process' umask See CVE-2007-3740 * hugetlb-prio_tree-unit-fix.dpatch [SECURITY] Fix misconversion of hugetlb_vmtruncate_list to prio_tree which could be used to trigger a BUG_ON() call in exit_mmap. See CVE-2007-4133 * amd64-zero-extend-32bit-ptrace.dpatch [SECURITY] Zero extend all registers after ptrace in 32-bit entry path. See CVE-2007-4573 * usb-pwc-disconnect-block.dpatch [SECURITY] Fix issue with unplugging webcams that use the pwc driver. If userspace still has the device open it can result, the driver would wait for the device to close, blocking the USB subsystem. See CVE-2007-5093 * powerpc-chrp-null-deref.dpatch [SECURITY][powerpc] Fix NULL pointer dereference if get_property fails on the subarchitecture See CVE-2007-6694 * random-bound-check-ordering.dpatch [SECURITY] Fix stack-based buffer overflow in the random number generator See CVE-2007-3105 * mmap-VM_DONTEXPAND.dpatch [SECURITY] Add VM_DONTEXPAND to vm_flags in drivers that register a fault handler but do not bounds check the offset argument See CVE-2008-0007 Files: bfba4b91bbd166d14d0bace5ac137715 1191 devel optional kernel-image-2.6.8-ia64_2.6.8-15sarge1.dsc a5e62e3da21f1e89e1c7f76508de9673 69734 devel optional kernel-image-2.6.8-ia64_2.6.8-15sarge1.tar.gz af94110dd2e8401a975315dd93aaa28b 3104422 devel optional kernel-headers-2.6.8-4_2.6.8-15sarge1_ia64.deb a4a24b0e48c4f6c2c3d8ab17fc6fe4ae 12202 devel optional kernel-headers-2.6-itanium-smp_2.6.8-15sarge1_ia64.deb 75abbf3dc640b0765b0f510c0c783ecb 12200 base optional kernel-image-2.6-itanium-smp_2.6.8-15sarge1_ia64.deb 2f8285b89e03dee6c71f9d8079d13499 205878 devel optional kernel-headers-2.6.8-4-itanium-smp_2.6.8-15sarge1_ia64.deb 8a186facbb3023845284531d27c01486 22158208 base optional kernel-image-2.6.8-4-itanium-smp_2.6.8-15sarge1_ia64.deb 7ca412f9885d85f92340423de43e284f 12236 devel optional kernel-headers-2.6-mckinley-smp_2.6.8-15sarge1_ia64.deb b69b46b5a764b898baaf3ba3ad056d5f 12228 base optional kernel-image-2.6-mckinley-smp_2.6.8-15sarge1_ia64.deb e5befe9b90d7f8d43ed7e1dfff89851c 205672 devel optional kernel-headers-2.6.8-4-mckinley-smp_2.6.8-15sarge1_ia64.deb de343e5cddd6936ec435cdc87d5ab689 22174026 base optional kernel-image-2.6.8-4-mckinley-smp_2.6.8-15sarge1_ia64.deb 031a5db578a7291bf25c13b7be4b4ec6 12140 devel optional kernel-headers-2.6-itanium_2.6.8-15sarge1_ia64.deb fe3ae95000fba99026557e9f3110eef9 12136 base optional kernel-image-2.6-itanium_2.6.8-15sarge1_ia64.deb 85610c56d71469abb003503c9395f639 206340 devel optional kernel-headers-2.6.8-4-itanium_2.6.8-15sarge1_ia64.deb 8336b695564c2eb6d8dc98a13c3b4e1a 21496770 base optional kernel-image-2.6.8-4-itanium_2.6.8-15sarge1_ia64.deb 618961c987120133ee1c999e4cf5f62f 12172 devel optional kernel-headers-2.6-mckinley_2.6.8-15sarge1_ia64.deb 3d5dfd32448f8cb967dd1ce9549789af 12162 base optional kernel-image-2.6-mckinley_2.6.8-15sarge1_ia64.deb 62768e32c962c2f1f2f19c0062800557 206076 devel optional kernel-headers-2.6.8-4-mckinley_2.6.8-15sarge1_ia64.deb daa90c69a36eb5baf3231fed495766e1 21417820 base optional kernel-image-2.6.8-4-mckinley_2.6.8-15sarge1_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHvNmChuANDBmkLRkRAgfmAJ4v0z8R/dbxTaHS+KR7bzitxRqp4gCghrT2 5RTBPjohdKyO1+LIOEd/HL0= =79dn -----END PGP SIGNATURE----- Accepted: kernel-headers-2.6-itanium-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6-itanium-smp_2.6.8-15sarge1_ia64.deb kernel-headers-2.6-itanium_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6-itanium_2.6.8-15sarge1_ia64.deb kernel-headers-2.6-mckinley-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6-mckinley-smp_2.6.8-15sarge1_ia64.deb kernel-headers-2.6-mckinley_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6-mckinley_2.6.8-15sarge1_ia64.deb kernel-headers-2.6.8-4-itanium-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6.8-4-itanium-smp_2.6.8-15sarge1_ia64.deb kernel-headers-2.6.8-4-itanium_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6.8-4-itanium_2.6.8-15sarge1_ia64.deb kernel-headers-2.6.8-4-mckinley-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6.8-4-mckinley-smp_2.6.8-15sarge1_ia64.deb kernel-headers-2.6.8-4-mckinley_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6.8-4-mckinley_2.6.8-15sarge1_ia64.deb kernel-headers-2.6.8-4_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-headers-2.6.8-4_2.6.8-15sarge1_ia64.deb kernel-image-2.6-itanium-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6-itanium-smp_2.6.8-15sarge1_ia64.deb kernel-image-2.6-itanium_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6-itanium_2.6.8-15sarge1_ia64.deb kernel-image-2.6-mckinley-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6-mckinley-smp_2.6.8-15sarge1_ia64.deb kernel-image-2.6-mckinley_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6-mckinley_2.6.8-15sarge1_ia64.deb kernel-image-2.6.8-4-itanium-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6.8-4-itanium-smp_2.6.8-15sarge1_ia64.deb kernel-image-2.6.8-4-itanium_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6.8-4-itanium_2.6.8-15sarge1_ia64.deb kernel-image-2.6.8-4-mckinley-smp_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6.8-4-mckinley-smp_2.6.8-15sarge1_ia64.deb kernel-image-2.6.8-4-mckinley_2.6.8-15sarge1_ia64.deb to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6.8-4-mckinley_2.6.8-15sarge1_ia64.deb kernel-image-2.6.8-ia64_2.6.8-15sarge1.dsc to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6.8-ia64_2.6.8-15sarge1.dsc kernel-image-2.6.8-ia64_2.6.8-15sarge1.tar.gz to pool/main/k/kernel-image-2.6.8-ia64/kernel-image-2.6.8-ia64_2.6.8-15sarge1.tar.gz