-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 14 May 2014 11:54:02 -0600 Source: user-mode-linux Binary: user-mode-linux Architecture: source amd64 Version: 2.6.32-1um-4+48squeeze6 Distribution: squeeze-security Urgency: high Maintainer: User Mode Linux Maintainers <pkg-uml-pkgs@lists.alioth.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: user-mode-linux - User-mode Linux (kernel) Changes: user-mode-linux (2.6.32-1um-4+48squeeze6) squeeze-security; urgency=high . * Rebuild against linux-source-2.6.32 (2.6.32-48squeeze5): * CVE-2014-0196: Jiri Slaby discovered a race condition in the pty layer, which could lead to denial of service or privilege escalation. * CVE-2014-1737 / CVE-2014-1738: Matthew Daley discovered that missing input sanitising in the FDRAWCMD ioctl and an information leak could result in privilege escalation. Checksums-Sha1: 53949929b8a8af41f7d67ff9a9477ffd294afd48 2053 user-mode-linux_2.6.32-1um-4+48squeeze6.dsc 566924a2e6893c8180a9f4aef3b00875b71bbea5 26417 user-mode-linux_2.6.32-1um-4+48squeeze6.diff.gz fc119920ebbd8412648639a09ed7787d20fcc24e 7087564 user-mode-linux_2.6.32-1um-4+48squeeze6_amd64.deb Checksums-Sha256: 512545382460820fda30bfc097370dd501db47016874c575b54b4a15abc34b54 2053 user-mode-linux_2.6.32-1um-4+48squeeze6.dsc 0f0b13d79071d46ab81dbdc1f2e33ba8d54b20a3746695b9d82995609dc55a35 26417 user-mode-linux_2.6.32-1um-4+48squeeze6.diff.gz ccdba0d2ee9dd084deaeb7233aebc78348970c69d181853aec88f23882a43337 7087564 user-mode-linux_2.6.32-1um-4+48squeeze6_amd64.deb Files: d15dcbabbf6455a819a4e1b64aa72289 2053 kernel extra user-mode-linux_2.6.32-1um-4+48squeeze6.dsc 9db20fae276fa561b81e4bd34d2a818b 26417 kernel extra user-mode-linux_2.6.32-1um-4+48squeeze6.diff.gz 78458a665647eb72806f1858e3d0809c 7087564 kernel extra user-mode-linux_2.6.32-1um-4+48squeeze6_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJTc67XAAoJEBv4PF5U/IZAH2cQAIPnB86dJUXu+ylaDr1b7dkl ceNIOdytGxH/YHUdkZO1nvmhKKwHKaU8G01SHJFOgZt4Cy0FoG4QpCrsoaSNMlCy A0g+zouIkRgqr2lBku1omVH6m+ihSMLujOgBuTdD0o5MFbuI8Cvb+4QE74Ud8FNM tLX9NCWD96gBdE2w3SNYR6HLnG5UmZ25/7zu9Paa11HJhjjjpLypNi2tOa2ChxG3 w2ZEaATUZhsvMoybRx6O71LYFRcRzbgPvundQqLJgZviCY65XrL4rDGPTdUt3su9 mGARAe4FkLf3MJ9KDQ86sfkfox8IpzAm+lqFg/UajWUBXVX+Smj1q2A9AG8DW3La rtgygMs40WEeDf4FN98scFeDWTHe2xXyVH38gmXtAUhVFvODmNbPyLBiw4+1pxnt llzsKPiC9aI7bN7JXi32qncTexNQC17d35jUHGbJ1HU0JGVcx/dwuY3xSVvMTflV x6gLja/1eCI88W6CT6YD23RvmNvQoQMsIxOpAfnr6fenNeuCXsFkgJiDAUs/Qkbg ewcqwsNJ2sdxq+YrxuC5P2sYI169M438pTDPd5dFwX4EQPySjFG0mwpqBaZe9e7Q hI31j6/2jfBVJi+iQAtplRGZXQirKUd0QcYgPsF7qVsUAb7DIkSdlbaTSatxUiC2 UZK+6Sduk2BoM7t8SxGB =wToJ -----END PGP SIGNATURE-----