-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 3 Sep 2006 19:01:32 -0600 Source: kernel-patch-powerpc-2.4.27 Binary: kernel-patch-2.4.27-powerpc kernel-build-2.4.27-nubus kernel-image-2.4.27-nubus kernel-headers-2.4.27-powerpc kernel-image-2.4.27-powerpc kernel-patch-2.4.27-apus kernel-build-2.4.27-apus kernel-headers-2.4.27-nubus kernel-image-2.4.27-powerpc-small kernel-build-2.4.27-powerpc-smp kernel-image-2.4.27-powerpc-smp kernel-image-2.4.27-apus kernel-patch-2.4.27-nubus kernel-headers-2.4.27-apus kernel-build-2.4.27-powerpc kernel-build-2.4.27-powerpc-small Architecture: source powerpc Version: 2.4.27-10sarge4 Distribution: stable-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: kernel-build-2.4.27-apus - build infrastructure for kernel version 2.4.27-apus kernel-build-2.4.27-nubus - build infrastructure for kernel version 2.4.27-nubus kernel-build-2.4.27-powerpc - build infrastructure for kernel version 2.4.27-powerpc kernel-build-2.4.27-powerpc-small - build infrastructure for kernel version 2.4.27-powerpc-small kernel-build-2.4.27-powerpc-smp - build infrastructure for kernel version 2.4.27-powerpc-smp kernel-headers-2.4.27-apus - Linux/APUS kernel headers. kernel-headers-2.4.27-nubus - Linux/nubus kernel headers. kernel-headers-2.4.27-powerpc - Linux/nubus kernel headers. kernel-image-2.4.27-apus - Linux/APUS kernel binary image. kernel-image-2.4.27-nubus - Linux/nubus kernel binary image. kernel-image-2.4.27-powerpc - Linux/PowerPC kernel binary image for the powerpc flavour kernel-image-2.4.27-powerpc-small - Linux/PowerPC kernel binary image for the powerpc-small flavour kernel-image-2.4.27-powerpc-smp - Linux/PowerPC kernel binary image for the powerpc-smp flavour kernel-patch-2.4.27-apus - Diffs to the kernel source for APUS kernel-patch-2.4.27-nubus - Diffs to the kernel source for nubus kernel-patch-2.4.27-powerpc - Diffs to the kernel source for nubus Changes: kernel-patch-powerpc-2.4.27 (2.4.27-10sarge4) stable-security; urgency=high . * Build against kernel-tree-2.4.27-10sarge4: * [ERRATA] 213_madvise_remove-restrict.diff [SECURITY] The 2.4.27-10sarge3 changelog associated this patch with CVE-2006-1524. However, this patch fixes an mprotect issue that was split off from the original report into CVE-2006-2071. 2.4.27 is not vulnerable to CVE-2006-1524 the madvise_remove issue. See CVE-2006-2071 * 223_nfs-handle-long-symlinks.diff [SECURITY] Fix buffer overflow in NFS readline handling that allows a remote server to cause a denial of service (crash) via a long symlink See CVE-2005-4798 * 224_cdrom-bad-cgc.buflen-assign.diff [SECURITY] Fix buffer overflow in dvd_read_bca which could potentially be used by a local user to trigger a buffer overflow via a specially crafted DVD, USB stick, or similar automatically mounted device. See CVE-2006-2935 * 225_sg-no-mmap-VM_IO.diff [SECURITY] Fix DoS vulnerability whereby a local user could attempt a dio/mmap and cause the sg driver to oops. See CVE-2006-1528 * 226_snmp-nat-mem-corruption-fix.diff [SECURITY] Fix memory corruption in snmp_trap_decode See CVE-2006-2444 * 227_kfree_skb.diff [SECURITY] Fix race between kfree_skb and __skb_unlink See CVE-2006-2446 * 228_sparc-mb-extraneous-semicolons.diff Fix a syntax error caused by extranous semicolons in smp_mb() macros which resulted in a build failure with 227_kfree_skb.diff * 229_sctp-priv-elevation.diff, 230_sctp-priv-elevation-2.diff [SECURITY] Fix SCTP privelege escalation See CVE-2006-3745 * 231_udf-deadlock.diff [SECURITY] Fix possible UDF deadlock and memory corruption See CVE-2006-4145 * 232_sparc-membar-extraneous-semicolons.diff Fix an additional syntax error caused by extraneous semicolons in membar macros on sparc Files: df39d9eb3665bde335c73e8f5b79c41f 1131 devel optional kernel-patch-powerpc-2.4.27_2.4.27-10sarge4.dsc 1d6901e2c966af9664f6927b5132e032 1464290 devel optional kernel-patch-powerpc-2.4.27_2.4.27-10sarge4.tar.gz c48f4b10b6e887cc67bb44aafe719b58 1818940 base optional kernel-image-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb a9041a7e6fa2bdad090cdcd737664084 142738 devel optional kernel-build-2.4.27-apus_2.4.27-10sarge4_powerpc.deb 12f25b316bd25604209a3cbaf5fbd178 156604 devel optional kernel-build-2.4.27-powerpc-smp_2.4.27-10sarge4_powerpc.deb c114b71fe46e45f2bc8d0cb115b82a47 4801492 devel optional kernel-headers-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb 587e0541503c1a0c585d149e5f37f7f3 156528 devel optional kernel-build-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb 3d2da4eb5cb59f34cdac15658c6631b9 13485830 base optional kernel-image-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb 241522d021e46710f0c09a42abb7e04f 2501708 base optional kernel-image-2.4.27-apus_2.4.27-10sarge4_powerpc.deb 86eb08fe122937b2b5eca16d1daffc7e 65420 devel optional kernel-patch-2.4.27-apus_2.4.27-10sarge4_powerpc.deb a0081b92274d2565ea6a19dda1a96280 12757364 base optional kernel-image-2.4.27-powerpc-small_2.4.27-10sarge4_powerpc.deb f2c0b689ad22d64907d11ff119e1586c 142582 devel optional kernel-build-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb 6f8daa7ee570ab03414c95fee28f750d 4683788 devel optional kernel-headers-2.4.27-apus_2.4.27-10sarge4_powerpc.deb 0204b3a7c7d1976383dd01e93f6104b2 13792872 base optional kernel-image-2.4.27-powerpc-smp_2.4.27-10sarge4_powerpc.deb 238998f6e2d8bc9f5fc8a775d1941e34 156816 devel optional kernel-build-2.4.27-powerpc-small_2.4.27-10sarge4_powerpc.deb 7d9450ac7257cdc47a39029e470fdc51 4693896 devel optional kernel-headers-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb 1f96ad86ef5b1b7bf000d196d96544df 10502 devel optional kernel-patch-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb 7e4db127bc2d2c1d37e7eda2c0d14f4d 10582 devel optional kernel-patch-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFDvTmhuANDBmkLRkRAqg1AJwPl749mbfxqaqEtUsbkkP+M/limwCdFyjV iP/mqdGYIWhZmksJHg+sWEU= =Q4Ym -----END PGP SIGNATURE----- Accepted: kernel-build-2.4.27-apus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-apus_2.4.27-10sarge4_powerpc.deb kernel-build-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb kernel-build-2.4.27-powerpc-small_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-powerpc-small_2.4.27-10sarge4_powerpc.deb kernel-build-2.4.27-powerpc-smp_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-powerpc-smp_2.4.27-10sarge4_powerpc.deb kernel-build-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb kernel-headers-2.4.27-apus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-headers-2.4.27-apus_2.4.27-10sarge4_powerpc.deb kernel-headers-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-headers-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb kernel-headers-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-headers-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb kernel-image-2.4.27-apus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-apus_2.4.27-10sarge4_powerpc.deb kernel-image-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb kernel-image-2.4.27-powerpc-small_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-powerpc-small_2.4.27-10sarge4_powerpc.deb kernel-image-2.4.27-powerpc-smp_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-powerpc-smp_2.4.27-10sarge4_powerpc.deb kernel-image-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb kernel-patch-2.4.27-apus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-2.4.27-apus_2.4.27-10sarge4_powerpc.deb kernel-patch-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-2.4.27-nubus_2.4.27-10sarge4_powerpc.deb kernel-patch-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-2.4.27-powerpc_2.4.27-10sarge4_powerpc.deb kernel-patch-powerpc-2.4.27_2.4.27-10sarge4.dsc to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-powerpc-2.4.27_2.4.27-10sarge4.dsc kernel-patch-powerpc-2.4.27_2.4.27-10sarge4.tar.gz to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-powerpc-2.4.27_2.4.27-10sarge4.tar.gz