-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 15 Apr 2009 22:16:17 +0200 Source: udev Binary: udev libvolume-id0 libvolume-id-dev udev-udeb Architecture: source i386 Version: 0.125-7+lenny1 Distribution: stable-security Urgency: high Maintainer: Marco d'Itri <md@linux.it> Changed-By: Marco d'Itri <md@linux.it> Description: libvolume-id-dev - libvolume_id development headers libvolume-id0 - libvolume_id shared library udev - /dev/ and hotplug management daemon udev-udeb - /dev/ and hotplug management daemon (udeb) Changes: udev (0.125-7+lenny1) stable-security; urgency=high . * STABLE SECURITY UPDATE. * Added patch netlink-owner-check, backported by Ubuntu. Fixes a local privilege escalation to root exploitable by spoofed netlink messages (CVE-2009-1185). * Added patch encoding-overflow, backported by Ubuntu. Fixes a possible local DoS (udevd crash) (CVE-2009-1186). Checksums-Sha1: 1efa1b95633fd00435fd8f49b87a0d606468bebe 1031 udev_0.125-7+lenny1.dsc 96638ea0815a62618a9745032c580f681fc4aa98 254564 udev_0.125.orig.tar.gz 305022d5892bfff6c4385380abc2a808566e84f7 63221 udev_0.125-7+lenny1.diff.gz 0be90e7a315e6c023846ede0672605c42545bbe7 253168 udev_0.125-7+lenny1_i386.deb c1178dc750c6268e46e69e70c0d15992cec2f089 76280 libvolume-id0_0.125-7+lenny1_i386.deb 6e13b058c02794c23da8363772afa7206b6e6f33 2426 libvolume-id-dev_0.125-7+lenny1_i386.deb ed9aac0c24368cd3fe691969423fba723f1282b0 115724 udev-udeb_0.125-7+lenny1_i386.udeb Checksums-Sha256: 80f4719772436df7bb5eb64498323e7c15e74c8903251622d546e460b1912b0d 1031 udev_0.125-7+lenny1.dsc a5de9fe77c844844f7a2457d090e3d17f749acdc38dad45ddce9ddb515a8a562 254564 udev_0.125.orig.tar.gz bda8bc769b5a4c30ad66e3b6cb11c029d9c79e82e850880850e34280d1507d5f 63221 udev_0.125-7+lenny1.diff.gz 75794918ff0f3e3d22b23d9034afaf9aa72b77c9743376c879993bb4c08c8784 253168 udev_0.125-7+lenny1_i386.deb 3bc573e8b16b1c344c2a969da95e48b0d86437b612a4c9d8d40189ee4ce21939 76280 libvolume-id0_0.125-7+lenny1_i386.deb 6ad9cc681764e3c71d6db291467602044c187a7e597f181c304923847f717587 2426 libvolume-id-dev_0.125-7+lenny1_i386.deb e0a9884c0c3f7c91e1f3aec8338f533b569d518fab42045318562e57c8f3bcd8 115724 udev-udeb_0.125-7+lenny1_i386.udeb Files: 3c1c71e9321ee24dcbb4237bda82ecf8 1031 admin important udev_0.125-7+lenny1.dsc be98e04cefdd9ca76b8fe7e92735ce29 254564 admin important udev_0.125.orig.tar.gz 1cdb4f78dc7cf5c5702fa69e3f528724 63221 admin important udev_0.125-7+lenny1.diff.gz 9667472701f5f78e75f944afe4e18a1f 253168 admin important udev_0.125-7+lenny1_i386.deb c9f04437d9c090e54fdfaf4c08b04273 76280 libs required libvolume-id0_0.125-7+lenny1_i386.deb ea4c748d93da3e0ffd9c070461fb9ea4 2426 libdevel optional libvolume-id-dev_0.125-7+lenny1_i386.deb 05843396641d6e8eed4d417020969f23 115724 debian-installer important udev-udeb_0.125-7+lenny1_i386.udeb Package-Type: udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAknmTGcACgkQFGfw2OHuP7GyhwCgm4taPkmnd+2pii8nwLPx8YcW oDoAnRj8xbPGBcTP9uFvuobApWjjiKQi =S8Hi -----END PGP SIGNATURE----- Accepted: libvolume-id-dev_0.125-7+lenny1_i386.deb to pool/main/u/udev/libvolume-id-dev_0.125-7+lenny1_i386.deb libvolume-id0_0.125-7+lenny1_i386.deb to pool/main/u/udev/libvolume-id0_0.125-7+lenny1_i386.deb udev-udeb_0.125-7+lenny1_i386.udeb to pool/main/u/udev/udev-udeb_0.125-7+lenny1_i386.udeb udev_0.125-7+lenny1.diff.gz to pool/main/u/udev/udev_0.125-7+lenny1.diff.gz udev_0.125-7+lenny1.dsc to pool/main/u/udev/udev_0.125-7+lenny1.dsc udev_0.125-7+lenny1_i386.deb to pool/main/u/udev/udev_0.125-7+lenny1_i386.deb