[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted kernel-image-speakup-i386 2.4.27-1.1sarge2 (source i386 all)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 10 Jun 2006 12:17:49 -0600
Source: kernel-image-speakup-i386
Binary: kernel-image-2.4.27-speakup kernel-doc-2.4.27-speakup kernel-headers-2.4.27-speakup
Architecture: source i386 all
Version: 2.4.27-1.1sarge2
Distribution: stable-security
Urgency: high
Maintainer: Mario Lang <mlang@debian.org>
Changed-By: dann frazier <dannf@debian.org>
Description: 
 kernel-doc-2.4.27-speakup - Linux kernel specific documentation for version 2.4.27-speakup
 kernel-headers-2.4.27-speakup - Header files related to Linux kernel version 2.4.27-speakup
 kernel-image-2.4.27-speakup - Linux kernel image for version 2.4.27-speakup
Changes: 
 kernel-image-speakup-i386 (2.4.27-1.1sarge2) stable-security; urgency=high
 .
   * NMU by the Security Team
   * Build against kernel-tree-2.4.27-10sarge3:
     * 207_smbfs-chroot-escape.diff
       [SECURITY] Fix directory traversal vulnerability in smbfs that permits
       local users to escape chroot restrictions
       See CVE-2006-1864
     * 208_ia64-die_if_kernel-returns.diff
       [SECURITY][ia64] Fix a potential local DoS on ia64 systems caused by
       an incorrect 'noreturn' attribute on die_if_kernel()
       See CVE-2006-0742
     * 209_sctp-discard-unexpected-in-closed.diff
       [SECURITY] Fix remote DoS in SCTP code by discarding unexpected chunks
       received in CLOSED state instead of calling BUG()
       See CVE-2006-2271
     * 210_ipv4-id-no-increment.diff
       [SECURITY] Fix vulnerability that allows remote attackers to conduct an
       Idle Scan attack, bypassing intended protections against such attacks
       See CVE-2006-1242
     * 211_usb-gadget-rndis-bufoverflow.diff
       [SECURITY] Fix buffer overflow in the USB Gadget RNDIS implementation
       that allows for a remote DoS attack (kmalloc'd memory corruption)
       See CVE-2006-1368
     * 212_ipv4-sin_zero_clear.diff
       [SECURITY] Fix local information leak in af_inet code
       See CVE-2006-1343
     * 213_madvise_remove-restrict.diff
       [SECURITY] Fix vulnerability that allows local users to bypass IPC
       permissions and replace portions of read-only tmpfs files with zeroes.
       See CVE-2006-1524
     * 214_mcast-ip-route-null-deref.diff
       [SECURITY] Fix local DoS vulnerability that allows local users to panic
       a system by requesting a route for a multicast IP
       See CVE-2006-1525
     * 215_sctp-fragment-recurse.diff
       [SECURITY] Fix remote DoS vulnerability that can lead to infinite
       recursion when a packet containing two or more DATA fragments is received
       See CVE-2006-2274
     * 216_sctp-fragmented-receive-fix.diff
       [SECURITY] Fix remote DoS vulnerability that allows IP fragmented
       COOKIE_ECHO and HEARTBEAT SCTP control chunks to cause a kernel panic
       See CVE-2006-2272
     * 217_amd64-fp-reg-leak.diff
       [SECURITY][amd64] Fix an information leak that allows a process to see
       a portion of the floating point state of other processes, possibly
       exposing sensitive information.
       See CVE-2006-1056
     * 218_do_add_counters-race.diff
       [SECURITY] Fix race condition in the do_add_counters() function in
       netfilter that allows local users with CAP_NET_ADMIN capabilities to
       read kernel memory
       See CVE-2006-0039
     * 219_sctp-hb-ack-overflow.diff
       [SECURITY] Fix a remote buffer overflow that can result from a badly
       formatted HB-ACK chunk
       See CVE-2006-1857
     * 220_sctp-param-bound-checks.diff
       [SECURITY] Fix a bound checking error (remote DoS) in the SCTP parameter
       checking code
       See CVE-2006-1858
     * 221_netfilter-do_replace-overflow.diff
       [SECURITY] Fix buffer overflow in netfilter do_replace which can could
       be triggered by users with CAP_NET_ADMIN rights.
       See CVE-2006-0038
     * 222_binfmt-bad-elf-entry-address.diff
       [SECURITY][amd64] Fix potential local DoS vulnerability in the binfmt_elf
       code on em64t processors
       See CVE-2006-0741
Files: 
 738178383acc2853cf8bd8b15861dc52 732 devel optional kernel-image-speakup-i386_2.4.27-1.1sarge2.dsc
 946929349518ac3d91c42825bfb6cabc 17809 devel optional kernel-image-speakup-i386_2.4.27-1.1sarge2.tar.gz
 810af192d449f6437de9c7b92bfc8f70 4771964 devel optional kernel-headers-2.4.27-speakup_2.4.27-1.1sarge2_i386.deb
 5e9e5072a78be7f12f2a499ee1116268 2419762 doc optional kernel-doc-2.4.27-speakup_2.4.27-1.1sarge2_all.deb
 3519c2d9f88bcbbe6cd1a793bc21a092 11303960 base optional kernel-image-2.4.27-speakup_2.4.27-1.1sarge2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEixvHhuANDBmkLRkRAuV6AJwPDmWx8XC7picSwp4j3HKtElcnpgCdHPaz
DErseQnRXh7YKdmtevRl2Fs=
=H4nI
-----END PGP SIGNATURE-----


Accepted:
kernel-doc-2.4.27-speakup_2.4.27-1.1sarge2_all.deb
  to pool/main/k/kernel-image-speakup-i386/kernel-doc-2.4.27-speakup_2.4.27-1.1sarge2_all.deb
kernel-headers-2.4.27-speakup_2.4.27-1.1sarge2_i386.deb
  to pool/main/k/kernel-image-speakup-i386/kernel-headers-2.4.27-speakup_2.4.27-1.1sarge2_i386.deb
kernel-image-2.4.27-speakup_2.4.27-1.1sarge2_i386.deb
  to pool/main/k/kernel-image-speakup-i386/kernel-image-2.4.27-speakup_2.4.27-1.1sarge2_i386.deb
kernel-image-speakup-i386_2.4.27-1.1sarge2.dsc
  to pool/main/k/kernel-image-speakup-i386/kernel-image-speakup-i386_2.4.27-1.1sarge2.dsc
kernel-image-speakup-i386_2.4.27-1.1sarge2.tar.gz
  to pool/main/k/kernel-image-speakup-i386/kernel-image-speakup-i386_2.4.27-1.1sarge2.tar.gz



Reply to: