-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 18 Feb 2008 04:19:06 -0700 Source: kernel-patch-powerpc-2.4.27 Binary: kernel-patch-2.4.27-powerpc kernel-build-2.4.27-nubus kernel-image-2.4.27-nubus kernel-headers-2.4.27-powerpc kernel-image-2.4.27-powerpc kernel-patch-2.4.27-apus kernel-build-2.4.27-apus kernel-headers-2.4.27-nubus kernel-image-2.4.27-powerpc-small kernel-build-2.4.27-powerpc-smp kernel-image-2.4.27-powerpc-smp kernel-image-2.4.27-apus kernel-patch-2.4.27-nubus kernel-headers-2.4.27-apus kernel-build-2.4.27-powerpc kernel-build-2.4.27-powerpc-small Architecture: source powerpc Version: 2.4.27-10sarge6 Distribution: oldstable-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: kernel-build-2.4.27-apus - build infrastructure for kernel version 2.4.27-apus kernel-build-2.4.27-nubus - build infrastructure for kernel version 2.4.27-nubus kernel-build-2.4.27-powerpc - build infrastructure for kernel version 2.4.27-powerpc kernel-build-2.4.27-powerpc-small - build infrastructure for kernel version 2.4.27-powerpc-small kernel-build-2.4.27-powerpc-smp - build infrastructure for kernel version 2.4.27-powerpc-smp kernel-headers-2.4.27-apus - Linux/APUS kernel headers. kernel-headers-2.4.27-nubus - Linux/nubus kernel headers. kernel-headers-2.4.27-powerpc - Linux/nubus kernel headers. kernel-image-2.4.27-apus - Linux/APUS kernel binary image. kernel-image-2.4.27-nubus - Linux/nubus kernel binary image. kernel-image-2.4.27-powerpc - Linux/PowerPC kernel binary image for the powerpc flavour kernel-image-2.4.27-powerpc-small - Linux/PowerPC kernel binary image for the powerpc-small flavour kernel-image-2.4.27-powerpc-smp - Linux/PowerPC kernel binary image for the powerpc-smp flavour kernel-patch-2.4.27-apus - Diffs to the kernel source for APUS kernel-patch-2.4.27-nubus - Diffs to the kernel source for nubus kernel-patch-2.4.27-powerpc - Diffs to the kernel source for nubus Changes: kernel-patch-powerpc-2.4.27 (2.4.27-10sarge6) oldstable-security; urgency=high . * Build against kernel-tree-2.4.27-10sarge6: * 239_mincore-hang.diff [SECURITY] Fix a potential deadlock in mincore See CVE-2006-4814 * [ERRATA] 240_smbfs-honor-mount-opts-2.diff Fix some regressions with respect to file types (e.g., symlinks) introduced by the fix for CVE-2006-5871 in 2.4.27-10sarge5 * 241_bluetooth-capi-size-checks.diff [SECURITY] Add additional length checks to avoid potential remote DoS attacks in the handling of CAPI messages in the bluetooth driver See CVE-2006-6106 * 242_ext3-fsfuzz.diff [SECURITY] Fix a DoS vulnerability that can be triggered by a local user with the ability to mount a corrupted ext3 filesystem See CVE-2006-6053 * 243_ipv6_fl_socklist-no-share.diff [SECURITY] Fix local DoS vulnerability caused by inadvertently sharing ipv6_fl_socklist between the listening socket and the socket created for connection. See CVE-2007-1592 * 244_bluetooth-l2cap-hci-info-leaks.diff 245_bluetooth-l2cap-hci-info-leaks-2.diff [SECURITY] Fix information leaks in setsockopt() implementations See CVE-2007-1353 * 246_dn_fib-out-of-bounds.diff 266_ipv4-fib_props-out-of-bounds.diff 267_ipv4-fib_props-out-of-bounds-2.diff [SECURITY] Fix out of bounds condition in dn_fib_props[] See CVE-2007-2172 * 247_reset-pdeathsig-on-suid.diff [SECURITY] Fix potential privilege escalation caused by improper clearing of the child process' pdeath signal. Thanks to Marcel Holtmann for the patch. See CVE-2007-3848 * 248_random-reseed-sizeof-fix.diff [SECURITY] Fix a bug in the random driver reseeding code that reduces entropy by reseeding a smaller buffer size than expected See CVE-2007-4311 * 249_openpromfs-signedness-bug.diff 250_openpromfs-checks-1.diff 251_openpromfs-checks-2.diff 252_openpromfs-checks-3.diff [SECURITY] Fix a number of data checks in openprom code See CVE-2004-2731 * 253_coredump-only-to-same-uid.diff [SECURITY] Fix an issue where core dumping over a file that already exists retains the ownership of the original file See CVE-2007-6206 * 254_cramfs-check-block-length.diff [SECURITY] Add a sanity check of the block length in cramfs_readpage to avoid a potential oops condition See CVE-2006-5823 * 255_pppoe-socket-release-mem-leak.diff [SECURITY] fix unpriveleged memory leak when a PPPoE socket is released after connect but before PPPIOCGCHAN ioctl is called upon it See CVE-2007-2525 * 256_i4l-isdn_ioctl-mem-overrun.diff [SECURITY] Fix potential isdn ioctl memory overrun See CVE-2007-6151 * 257_isdn-net-overflow.diff [SECURITY] Fix potential overflows in the ISDN subsystem See CVE-2007-6063 * 258_ext2_readdir-f_pos-fix.diff, 259_ext2_readdir-infinite-loop.diff, 260_ext2-skip-pages-past-num-blocks.diff [SECURITY] Add some sanity checking for a corrupted i_size in ext2_find_entry() See CVE-2006-6054 * 261_listxattr-mem-corruption.diff [SECURITY] Fix userspace corruption vulnerability caused by incorrectly promoted return values in bad_inode_ops This patches changes the kernel ABI. See CVE-2006-5753 * 262_aacraid-ioctl-perm-check.diff [SECURITY] Require admin capabilities to issue ioctls to aacraid devices See CVE-2007-4308 * 263_usb-pwc-disconnect-block.diff [SECURITY] Fix issue with unplugging webcams that use the pwc driver. If userspace still has the device open it can result, the driver would wait for the device to close, blocking the USB subsystem. See CVE-2007-5093 * 264_mmap-VM_DONTEXPAND.diff [SECURITY] Add VM_DONTEXPAND to vm_flags in drivers that register a fault handler but do not bounds check the offset argument See CVE-2008-0007 * 265_powerpc-chrp-null-deref.diff [SECURITY][powerpc] Fix NULL pointer dereference if get_property fails on the subarchitecture See CVE-2007-6694 Files: 67e25655311032dc532f331bfaad529e 1130 devel optional kernel-patch-powerpc-2.4.27_2.4.27-10sarge6.dsc 4077db3abe1299270d37ab358e8f5443 1466506 devel optional kernel-patch-powerpc-2.4.27_2.4.27-10sarge6.tar.gz 29e20e7d40917be81aa249d8bf88194f 69216 devel optional kernel-patch-2.4.27-apus_2.4.27-10sarge6_powerpc.deb 63ed1a37308075d0b9c85dacb3025f87 4758074 devel optional kernel-headers-2.4.27-apus_2.4.27-10sarge6_powerpc.deb 7a648cfd329f18cd56f758c5365a3c8c 2505832 base optional kernel-image-2.4.27-apus_2.4.27-10sarge6_powerpc.deb 7aaa0cf1c764ec0b8924787e61b638d4 145224 devel optional kernel-build-2.4.27-apus_2.4.27-10sarge6_powerpc.deb d068007806c2e699271c71508fc1e84b 12344 devel optional kernel-patch-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb 31d52974cc78bd5a3609a21da97971d3 4767046 devel optional kernel-headers-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb 205748952ae7948db55771e71ac21f56 1822940 base optional kernel-image-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb a36ed8999258cfb8519c7b46a22e0e17 145044 devel optional kernel-build-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb d5b7af76b08c231639d192940e81a43e 12268 devel optional kernel-patch-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb 8707c0663aa5822a73d16352907c95eb 4874608 devel optional kernel-headers-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb 4f0010db40e43f778ce570e95a06551f 13490792 base optional kernel-image-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb 436532d564b7c34fe9ff134c44b28ac2 158876 devel optional kernel-build-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb 826cb8d8fa3d3c3cab66f89df073deeb 13795002 base optional kernel-image-2.4.27-powerpc-smp_2.4.27-10sarge6_powerpc.deb ab63071c1853718aecce65cd3a33e1a2 158946 devel optional kernel-build-2.4.27-powerpc-smp_2.4.27-10sarge6_powerpc.deb f7a7340904b21ed0a5486174ae810052 12763130 base optional kernel-image-2.4.27-powerpc-small_2.4.27-10sarge6_powerpc.deb 4562756f69ef7a3c639334b3dece3835 159174 devel optional kernel-build-2.4.27-powerpc-small_2.4.27-10sarge6_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHvNr0huANDBmkLRkRAoT7AJ9GOKt8meBXlZUEu1C3uu0oyoKjjwCeK+Hw AVsAly94INN1K4XgQC4a/K0= =+vZ4 -----END PGP SIGNATURE----- Accepted: kernel-build-2.4.27-apus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-apus_2.4.27-10sarge6_powerpc.deb kernel-build-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb kernel-build-2.4.27-powerpc-small_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-powerpc-small_2.4.27-10sarge6_powerpc.deb kernel-build-2.4.27-powerpc-smp_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-powerpc-smp_2.4.27-10sarge6_powerpc.deb kernel-build-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-build-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb kernel-headers-2.4.27-apus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-headers-2.4.27-apus_2.4.27-10sarge6_powerpc.deb kernel-headers-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-headers-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb kernel-headers-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-headers-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb kernel-image-2.4.27-apus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-apus_2.4.27-10sarge6_powerpc.deb kernel-image-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb kernel-image-2.4.27-powerpc-small_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-powerpc-small_2.4.27-10sarge6_powerpc.deb kernel-image-2.4.27-powerpc-smp_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-powerpc-smp_2.4.27-10sarge6_powerpc.deb kernel-image-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-image-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb kernel-patch-2.4.27-apus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-2.4.27-apus_2.4.27-10sarge6_powerpc.deb kernel-patch-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-2.4.27-nubus_2.4.27-10sarge6_powerpc.deb kernel-patch-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-2.4.27-powerpc_2.4.27-10sarge6_powerpc.deb kernel-patch-powerpc-2.4.27_2.4.27-10sarge6.dsc to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-powerpc-2.4.27_2.4.27-10sarge6.dsc kernel-patch-powerpc-2.4.27_2.4.27-10sarge6.tar.gz to pool/main/k/kernel-patch-powerpc-2.4.27/kernel-patch-powerpc-2.4.27_2.4.27-10sarge6.tar.gz