[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#701744: marked as done ([xen] Update to hypervisor 4.0.1-5.6 or linux-image-2.6.32-5-xen-amd64 2.6.32-48 causes networking (VIF) failures)



Your message dated Sat, 28 Sep 2013 07:17:37 +0000
with message-id <E1VPomX-0006Ni-70@franck.debian.org>
and subject line Bug#701744: fixed in linux-2.6 2.6.32-48squeeze4
has caused the Debian Bug report #701744,
regarding [xen] Update to hypervisor 4.0.1-5.6 or linux-image-2.6.32-5-xen-amd64 2.6.32-48 causes networking (VIF) failures
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
701744: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701744
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: xen
Version: 4.0.1-5.5
Severity: critical

--- Please enter the report below this line. ---

Hi!

Since the update last weekind in stable/squeeze I'm experiencing problems with running Xen on amd64 and multiple domUs losing their network connection/VIFs.

From http://blog.windfluechter.net/content/blog/2013/02/26/1597-xen-problems-vms-2632-5-xen-amd64

Unfortunately this update appears to be problematic on my Xen hosting server. This night it happened the second time that some of the virtual network interfaces disappeared or turned out to be non-working. For example I have two VMs: one running the webserver and one running the databases. Between these two VMs there's a bridge on the dom0 and both VMs have a VIF to that (internal) bridge. What happens is that this bridge becomes inaccessible from within the webserver VM.

Sadly there's not much to see in the log files. I just spotted this on dom0:

Feb 26 01:01:29 gate kernel: [12697.907512] vif3.1: Frag is bigger than frame. Feb 26 01:01:29 gate kernel: [12697.907550] vif3.1: fatal error; disabling device Feb 26 01:01:29 gate kernel: [12697.919921] xenbr1: port 3(vif3.1) entering disabled state Feb 26 01:22:00 gate kernel: [13928.644888] vif2.1: Frag is bigger than frame. Feb 26 01:22:00 gate kernel: [13928.644920] vif2.1: fatal error; disabling device Feb 26 01:22:00 gate kernel: [13928.663571] xenbr1: port 2(vif2.1) entering disabled state Feb 26 01:40:44 gate kernel: [15052.629280] vif7.1: Frag is bigger than frame. Feb 26 01:40:44 gate kernel: [15052.629314] vif7.1: fatal error; disabling device Feb 26 01:40:44 gate kernel: [15052.641725] xenbr1: port 6(vif7.1) entering disabled state

This corresponds to the number of VMs having lost their internal connection to the bridge. On the webserver VM I see this output:

Feb 26 01:59:01 vserv1 kernel: [16113.539767] IPv6: sending pkt_too_big to self Feb 26 01:59:01 vserv1 kernel: [16113.539794] IPv6: sending pkt_too_big to self Feb 26 02:30:54 vserv1 kernel: [18026.407517] IPv6: sending pkt_too_big to self Feb 26 02:30:54 vserv1 kernel: [18026.407546] IPv6: sending pkt_too_big to self Feb 26 02:30:54 vserv1 kernel: [18026.434761] IPv6: sending pkt_too_big to self Feb 26 02:30:54 vserv1 kernel: [18026.434787] IPv6: sending pkt_too_big to self Feb 26 03:39:16 vserv1 kernel: [22128.768214] IPv6: sending pkt_too_big to self Feb 26 03:39:16 vserv1 kernel: [22128.768240] IPv6: sending pkt_too_big to self Feb 26 04:39:51 vserv1 kernel: [25764.250170] IPv6: sending pkt_too_big to self Feb 26 04:39:51 vserv1 kernel: [25764.250196] IPv6: sending pkt_too_big to self

Rebooting the VMs will result in a non-working VM as it will get paused on creation and Xen scripts complain about not working hotplug scripts and Xen logs shows this:

    [2013-02-25 13:06:34 5470] DEBUG (XendDomainInfo:101)
    XendDomainInfo.create(['vm', ['name', 'vserv1'], ['memory', '2048'],
    ['on_poweroff', 'destroy'], ['on_reboot', 'restart'], ['on_crash',
    'restart'], ['on_xend_start', 'ignore'], ['on_xend_stop', 'ignore'],
['vcpus', '2'], ['oos', 1], ['bootloader', '/usr/lib/xen-4.0/bin/pygrub'],
    ['bootloader_args', ''], ['image', ['linux', ['root', '/dev/xvdb '],
['videoram', 4], ['tsc_mode', 0], ['nomigrate', 0]]], ['s3_integrity', 1], ['device', ['vbd', ['uname', 'phy:/dev/lv/vserv1-boot'], ['dev', 'xvda'], ['mode', 'w']]], ['device', ['vbd', ['uname', 'phy:/dev/lv/vserv1-disk'],
    ['dev', 'xvdb'], ['mode', 'w']]], ['device', ['vbd', ['uname',
'phy:/dev/lv/vserv1-swap'], ['dev', 'xvdc'], ['mode', 'w']]], ['device', ['vbd', ['uname', 'phy:/dev/lv/vserv1mirror'], ['dev', 'xvdd'], ['mode',
    'w']]]])
    [2013-02-25 13:06:34 5470] DEBUG (XendDomainInfo:2508)
    XendDomainInfo.constructDomain
[2013-02-25 13:06:34 5470] DEBUG (balloon:220) Balloon: 2100000 KiB free;
    need 16384; done.
    [2013-02-25 13:06:34 5470] DEBUG (XendDomain:464) Adding Domain: 39
    [2013-02-25 13:06:34 5470] DEBUG (XendDomainInfo:2818)
    XendDomainInfo.initDomain: 39 256
[2013-02-25 13:06:34 5781] DEBUG (XendBootloader:113) Launching bootloader
    as ['/usr/lib/xen-4.0/bin/pygrub', '--args=root=/dev/xvdb  ',
    '--output=/var/run/xend/boot/xenbl.6040', '/dev/lv/vserv1-boot'].
    [2013-02-25 13:06:39 5470] DEBUG (XendDomainInfo:2845)
    _initDomain:shadow_memory=0x0, memory_static_max=0x80000000,
    memory_static_min=0x0.
    [2013-02-25 13:06:39 5470] INFO (image:182) buildDomain os=linux dom=39
    vcpus=2
    [2013-02-25 13:06:39 5470] DEBUG (image:721) domid	    = 39
    [2013-02-25 13:06:39 5470] DEBUG (image:722) memsize	    = 2048
    [2013-02-25 13:06:39 5470] DEBUG (image:723) image	    =
    /var/run/xend/boot/boot_kernel.xj7W_t
    [2013-02-25 13:06:39 5470] DEBUG (image:724) store_evtchn   = 1
    [2013-02-25 13:06:39 5470] DEBUG (image:725) console_evtchn = 2
    [2013-02-25 13:06:39 5470] DEBUG (image:726) cmdline	    =
    root=UUID=ed71a39f-fd2e-4035-8557-493686baa151 ro root=/dev/xvdb
    [2013-02-25 13:06:39 5470] DEBUG (image:727) ramdisk	    =
    /var/run/xend/boot/boot_ramdisk.QavuAo
    [2013-02-25 13:06:39 5470] DEBUG (image:728) vcpus	    = 2
    [2013-02-25 13:06:39 5470] DEBUG (image:729) features	    =
    [2013-02-25 13:06:39 5470] DEBUG (image:730) flags	    = 0
    [2013-02-25 13:06:39 5470] DEBUG (image:731) superpages     = 0
[2013-02-25 13:06:40 5470] INFO (XendDomainInfo:2367) createDevice: vbd : {'uuid': '04d99772-cf27-aecf-2d1b-c73eaf657410', 'bootable': 1, 'driver':
    'paravirtualised', 'dev': 'xvda', 'uname': 'phy:/dev/lv/vserv1-boot',
    'mode': 'w'}
[2013-02-25 13:06:40 5470] DEBUG (DevController:95) DevController: writing
    {'virtual-device': '51712', 'device-type': 'disk', 'protocol':
    'x86_64-abi', 'backend-id': '0', 'state': '1', 'backend':
    '/local/domain/0/backend/vbd/39/51712'} to
    /local/domain/39/device/vbd/51712.
[2013-02-25 13:06:40 5470] DEBUG (DevController:97) DevController: writing
    {'domain': 'vserv1', 'frontend': '/local/domain/39/device/vbd/51712',
    'uuid': '04d99772-cf27-aecf-2d1b-c73eaf657410', 'bootable': '1', 'dev':
    'xvda', 'state': '1', 'params': '/dev/lv/vserv1-boot', 'mode': 'w',
    'online': '1', 'frontend-id': '39', 'type': 'phy'} to
    /local/domain/0/backend/vbd/39/51712.
[2013-02-25 13:06:40 5470] INFO (XendDomainInfo:2367) createDevice: vbd : {'uuid': 'e46cb89f-3e54-41d2-53bd-759ed6c690d2', 'bootable': 0, 'driver':
    'paravirtualised', 'dev': 'xvdb', 'uname': 'phy:/dev/lv/vserv1-disk',
    'mode': 'w'}
[2013-02-25 13:06:40 5470] DEBUG (DevController:95) DevController: writing
    {'virtual-device': '51728', 'device-type': 'disk', 'protocol':
    'x86_64-abi', 'backend-id': '0', 'state': '1', 'backend':
    '/local/domain/0/backend/vbd/39/51728'} to
    /local/domain/39/device/vbd/51728.
[2013-02-25 13:06:40 5470] DEBUG (DevController:97) DevController: writing
    {'domain': 'vserv1', 'frontend': '/local/domain/39/device/vbd/51728',
    'uuid': 'e46cb89f-3e54-41d2-53bd-759ed6c690d2', 'bootable': '0', 'dev':
    'xvdb', 'state': '1', 'params': '/dev/lv/vserv1-disk', 'mode': 'w',
    'online': '1', 'frontend-id': '39', 'type': 'phy'} to
    /local/domain/0/backend/vbd/39/51728.
[2013-02-25 13:06:40 5470] INFO (XendDomainInfo:2367) createDevice: vbd : {'uuid': 'e2d61860-7448-1843-3935-6b63c5d2878e', 'bootable': 0, 'driver':
    'paravirtualised', 'dev': 'xvdc', 'uname': 'phy:/dev/lv/vserv1-swap',
    'mode': 'w'}
[2013-02-25 13:06:40 5470] DEBUG (DevController:95) DevController: writing
    {'virtual-device': '51744', 'device-type': 'disk', 'protocol':
    'x86_64-abi', 'backend-id': '0', 'state': '1', 'backend':
    '/local/domain/0/backend/vbd/39/51744'} to
    /local/domain/39/device/vbd/51744.
[2013-02-25 13:06:40 5470] DEBUG (DevController:97) DevController: writing
    {'domain': 'vserv1', 'frontend': '/local/domain/39/device/vbd/51744',
    'uuid': 'e2d61860-7448-1843-3935-6b63c5d2878e', 'bootable': '0', 'dev':
    'xvdc', 'state': '1', 'params': '/dev/lv/vserv1-swap', 'mode': 'w',
    'online': '1', 'frontend-id': '39', 'type': 'phy'} to
    /local/domain/0/backend/vbd/39/51744.
[2013-02-25 13:06:40 5470] INFO (XendDomainInfo:2367) createDevice: vbd : {'uuid': 'd314a46e-1ce9-0e8d-b009-3f08e29735f5', 'bootable': 0, 'driver':
    'paravirtualised', 'dev': 'xvdd', 'uname': 'phy:/dev/lv/vserv1mirror',
    'mode': 'w'}
[2013-02-25 13:06:40 5470] DEBUG (DevController:95) DevController: writing
    {'virtual-device': '51760', 'device-type': 'disk', 'protocol':
    'x86_64-abi', 'backend-id': '0', 'state': '1', 'backend':
    '/local/domain/0/backend/vbd/39/51760'} to
    /local/domain/39/device/vbd/51760.
[2013-02-25 13:06:40 5470] DEBUG (DevController:97) DevController: writing
    {'domain': 'vserv1', 'frontend': '/local/domain/39/device/vbd/51760',
    'uuid': 'd314a46e-1ce9-0e8d-b009-3f08e29735f5', 'bootable': '0', 'dev':
    'xvdd', 'state': '1', 'params': '/dev/lv/vserv1mirror', 'mode': 'w',
    'online': '1', 'frontend-id': '39', 'type': 'phy'} to
    /local/domain/0/backend/vbd/39/51760.
[2013-02-25 13:06:40 5470] DEBUG (XendDomainInfo:3400) Storing VM details:
    {'on_xend_stop': 'ignore', 'shadow_memory': '0', 'uuid':
    '04541225-6d3c-3cae-a4c4-0b6d4ccfac7a', 'on_reboot': 'restart',
'start_time': '1361794000.37', 'on_poweroff': 'destroy', 'bootloader_args': '', 'on_xend_start': 'ignore', 'on_crash': 'restart', 'xend/restart_count':
    '0', 'vcpus': '2', 'vcpu_avail': '3', 'bootloader':
    '/usr/lib/xen-4.0/bin/pygrub', 'image': "(linux (kernel ) (args
    'root=/dev/xvdb  ') (superpages 0) (tsc_mode 0) (videoram 4) (pci ())
    (nomigrate 0) (notes (HV_START_LOW 18446603336221196288) (FEATURES
    '!writable_page_tables|pae_pgdir_above_4gb') (VIRT_BASE
18446744071562067968) (GUEST_VERSION 2.6) (PADDR_OFFSET 0) (GUEST_OS linux) (HYPERCALL_PAGE 18446744071578882048) (LOADER generic) (SUSPEND_CANCEL 1)
    (PAE_MODE yes) (ENTRY 18446744071584289280) (XEN_VERSION xen-3.0)))",
    'name': 'vserv1'}
    [2013-02-25 13:06:40 5470] DEBUG (XendDomainInfo:1804) Storing domain
    details: {'console/ring-ref': '2143834', 'image/entry':
'18446744071584289280', 'console/port': '2', 'store/ring-ref': '2143835',
    'image/loader': 'generic', 'vm':
    '/vm/04541225-6d3c-3cae-a4c4-0b6d4ccfac7a',
    'control/platform-feature-multiprocessor-suspend': '1',
'image/hv-start-low': '18446603336221196288', 'image/guest-os': 'linux', 'cpu/1/availability': 'online', 'image/virt-base': '18446744071562067968', 'memory/target': '2097152', 'image/guest-version': '2.6', 'image/pae-mode': 'yes', 'description': '', 'console/limit': '1048576', 'image/paddr-offset':
    '0', 'image/hypercall-page': '18446744071578882048',
    'image/suspend-cancel': '1', 'cpu/0/availability': 'online',
    'image/features/pae-pgdir-above-4gb': '1',
'image/features/writable-page-tables': '0', 'console/type': 'xenconsoled',
    'name': 'vserv1', 'domid': '39', 'image/xen-version': 'xen-3.0',
    'store/port': '1'}
[2013-02-25 13:06:40 5470] DEBUG (DevController:95) DevController: writing
    {'protocol': 'x86_64-abi', 'state': '1', 'backend-id': '0', 'backend':
    '/local/domain/0/backend/console/39/0'} to
    /local/domain/39/device/console/0.
[2013-02-25 13:06:40 5470] DEBUG (DevController:97) DevController: writing
    {'domain': 'vserv1', 'frontend': '/local/domain/39/device/console/0',
    'uuid': 'c8819aed-c78f-02b8-0ef7-1600abd15add', 'frontend-id': '39',
    'state': '1', 'location': '2', 'online': '1', 'protocol': 'vt100'} to
    /local/domain/0/backend/console/39/0.
    [2013-02-25 13:06:40 5470] DEBUG (XendDomainInfo:1891)
    XendDomainInfo.handleShutdownWatch
[2013-02-25 13:06:40 5470] DEBUG (DevController:139) Waiting for devices
    vif2.
[2013-02-25 13:06:40 5470] DEBUG (DevController:139) Waiting for devices
    vif.
[2013-02-25 13:06:40 5470] DEBUG (DevController:139) Waiting for devices
    vscsi.
[2013-02-25 13:06:40 5470] DEBUG (DevController:139) Waiting for devices
    vbd.
    [2013-02-25 13:06:40 5470] DEBUG (DevController:144) Waiting for 51712.
[2013-02-25 13:06:40 5470] DEBUG (DevController:628) hotplugStatusCallback
    /local/domain/0/backend/vbd/39/51712/hotplug-status.

From my point of view, either Xen hypervisor or the kernel seems to be broken, but it's hard to tell for me.


I suspect the problem within the Xen kernel part of VIF code as a reboot of the dom0 solves this problem temporarily without touching the domUs. But within some hours (<6 hrs) the issue re-appears. Although I assume that xend is responsible for adding/removing VIFs a restart of xend doesn't help at all. That's why I assume a kernel problem within the dom0.

I'm running 8 domUs at the moment, each of them is connected to the outer world through xenbr0 and connected to the internal world through xenbr1 and RFC1918 addresses. I'm running a mixed setup of routed and bridged config:

(vif-script vif-bridge)
(network-script network-route)

But the server ran several years with that setup without any problems, so I don't think that's an issue.

For now I'm forced to go back to a working kernel as I need to keep the server up and running.

--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.32-5-xen-amd64

gate:~# dpkg -l | grep xen
ii libxenstore3.0 4.0.1-5.6 Xenstore communications library for Xen ii linux-image-2.6.32-5-xen-amd64 2.6.32-48 Linux 2.6.32 for 64-bit PCs, Xen dom0 support ii xen-hypervisor-4.0-amd64 4.0.1-5.6 The Xen Hypervisor on AMD64 ii xen-linux-system-2.6-xen-amd64 2.6.32+29 Xen system with Linux 2.6 for 64-bit PCs (meta-package) ii xen-linux-system-2.6.32-5-xen-amd64 2.6.32-48 Xen system with Linux 2.6.32 on 64-bit PCs (meta-package) ii xen-tools 4.2-1 Tools to manage Xen virtual servers ii xen-utils-4.0 4.0.1-5.6 XEN administrative tools ii xen-utils-common 4.0.0-1 XEN administrative tools - common files ii xenstore-utils 4.0.1-5.6 Xenstore utilities for Xen ii xenwatch 0.5.4-2 Virtualization utilities, mostly for Xen


--
Ciao...            //      Fon: 0381-2744150
      Ingo       \X/       http://blog.windfluechter.net
Please don't share this address with Facebook or Google!
gpg pubkey: http://www.juergensmann.de/ij_public_key.asc

--- End Message ---
--- Begin Message ---
Source: linux-2.6
Source-Version: 2.6.32-48squeeze4

We believe that the bug you reported is fixed in the latest version of
linux-2.6, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 701744@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
dann frazier <dannf@debian.org> (supplier of updated linux-2.6 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 23 Sep 2013 12:36:26 -0600
Source: linux-2.6
Binary: linux-tools-2.6.32 linux-source-2.6.32 linux-doc-2.6.32 linux-manual-2.6.32 linux-patch-debian-2.6.32 firmware-linux-free linux-support-2.6.32-5 linux-base linux-libc-dev linux-headers-2.6.32-5-all linux-headers-2.6.32-5-all-alpha linux-headers-2.6.32-5-common linux-image-2.6.32-5-alpha-generic linux-headers-2.6.32-5-alpha-generic linux-image-2.6.32-5-alpha-smp linux-headers-2.6.32-5-alpha-smp linux-image-2.6.32-5-alpha-legacy linux-headers-2.6.32-5-alpha-legacy linux-headers-2.6.32-5-all-amd64 linux-image-2.6.32-5-amd64 linux-headers-2.6.32-5-amd64 linux-image-2.6.32-5-amd64-dbg linux-headers-2.6.32-5-common-openvz linux-image-2.6.32-5-openvz-amd64 linux-headers-2.6.32-5-openvz-amd64 linux-image-2.6.32-5-openvz-amd64-dbg linux-headers-2.6.32-5-common-vserver linux-image-2.6.32-5-vserver-amd64 linux-headers-2.6.32-5-vserver-amd64 linux-image-2.6.32-5-vserver-amd64-dbg linux-headers-2.6.32-5-common-xen linux-image-2.6.32-5-xen-amd64 linux-headers-2.6.32-5-xen-amd64
 linux-image-2.6.32-5-xen-amd64-dbg xen-linux-system-2.6.32-5-xen-amd64 linux-headers-2.6.32-5-all-armel linux-image-2.6.32-5-iop32x linux-headers-2.6.32-5-iop32x linux-image-2.6.32-5-ixp4xx linux-headers-2.6.32-5-ixp4xx linux-image-2.6.32-5-kirkwood linux-headers-2.6.32-5-kirkwood linux-image-2.6.32-5-orion5x linux-headers-2.6.32-5-orion5x linux-image-2.6.32-5-versatile linux-headers-2.6.32-5-versatile linux-headers-2.6.32-5-all-hppa linux-image-2.6.32-5-parisc linux-headers-2.6.32-5-parisc linux-image-2.6.32-5-parisc-smp linux-headers-2.6.32-5-parisc-smp linux-image-2.6.32-5-parisc64 linux-headers-2.6.32-5-parisc64 linux-image-2.6.32-5-parisc64-smp linux-headers-2.6.32-5-parisc64-smp linux-headers-2.6.32-5-all-i386 linux-image-2.6.32-5-486 linux-headers-2.6.32-5-486 linux-image-2.6.32-5-686 linux-headers-2.6.32-5-686 linux-image-2.6.32-5-686-bigmem linux-headers-2.6.32-5-686-bigmem linux-image-2.6.32-5-686-bigmem-dbg linux-image-2.6.32-5-openvz-686
 linux-headers-2.6.32-5-openvz-686 linux-image-2.6.32-5-openvz-686-dbg linux-image-2.6.32-5-vserver-686 linux-headers-2.6.32-5-vserver-686 linux-image-2.6.32-5-vserver-686-bigmem linux-headers-2.6.32-5-vserver-686-bigmem linux-image-2.6.32-5-vserver-686-bigmem-dbg linux-image-2.6.32-5-xen-686 linux-headers-2.6.32-5-xen-686 linux-image-2.6.32-5-xen-686-dbg xen-linux-system-2.6.32-5-xen-686 linux-headers-2.6.32-5-all-ia64 linux-image-2.6.32-5-itanium linux-headers-2.6.32-5-itanium linux-image-2.6.32-5-mckinley linux-headers-2.6.32-5-mckinley linux-image-2.6.32-5-vserver-itanium linux-headers-2.6.32-5-vserver-itanium linux-image-2.6.32-5-vserver-mckinley linux-headers-2.6.32-5-vserver-mckinley linux-headers-2.6.32-5-all-m68k linux-image-2.6.32-5-amiga linux-headers-2.6.32-5-amiga linux-image-2.6.32-5-atari linux-headers-2.6.32-5-atari linux-image-2.6.32-5-bvme6000 linux-headers-2.6.32-5-bvme6000 linux-image-2.6.32-5-mac linux-headers-2.6.32-5-mac
 linux-image-2.6.32-5-mvme147 linux-headers-2.6.32-5-mvme147 linux-image-2.6.32-5-mvme16x linux-headers-2.6.32-5-mvme16x linux-headers-2.6.32-5-all-mips linux-image-2.6.32-5-r4k-ip22 linux-headers-2.6.32-5-r4k-ip22 linux-image-2.6.32-5-r5k-ip32 linux-headers-2.6.32-5-r5k-ip32 linux-image-2.6.32-5-sb1-bcm91250a linux-headers-2.6.32-5-sb1-bcm91250a linux-image-2.6.32-5-sb1a-bcm91480b linux-headers-2.6.32-5-sb1a-bcm91480b linux-image-2.6.32-5-4kc-malta linux-headers-2.6.32-5-4kc-malta linux-image-2.6.32-5-5kc-malta linux-headers-2.6.32-5-5kc-malta linux-headers-2.6.32-5-all-mipsel linux-image-2.6.32-5-r5k-cobalt linux-headers-2.6.32-5-r5k-cobalt linux-headers-2.6.32-5-all-powerpc linux-image-2.6.32-5-powerpc linux-headers-2.6.32-5-powerpc linux-image-2.6.32-5-powerpc-smp linux-headers-2.6.32-5-powerpc-smp linux-image-2.6.32-5-powerpc64 linux-headers-2.6.32-5-powerpc64 linux-image-2.6.32-5-vserver-powerpc linux-headers-2.6.32-5-vserver-powerpc
 linux-image-2.6.32-5-vserver-powerpc64 linux-headers-2.6.32-5-vserver-powerpc64 linux-headers-2.6.32-5-all-s390 linux-image-2.6.32-5-s390x linux-headers-2.6.32-5-s390x linux-image-2.6.32-5-s390x-tape linux-image-2.6.32-5-vserver-s390x linux-headers-2.6.32-5-vserver-s390x linux-headers-2.6.32-5-all-sh4 linux-image-2.6.32-5-sh7751r linux-headers-2.6.32-5-sh7751r linux-image-2.6.32-5-sh7785lcr linux-headers-2.6.32-5-sh7785lcr linux-headers-2.6.32-5-all-sparc linux-image-2.6.32-5-sparc64 linux-headers-2.6.32-5-sparc64 linux-image-2.6.32-5-sparc64-smp linux-headers-2.6.32-5-sparc64-smp linux-image-2.6.32-5-vserver-sparc64 linux-headers-2.6.32-5-vserver-sparc64
 linux-headers-2.6.32-5-all-sparc64
Architecture: source all
Version: 2.6.32-48squeeze4
Distribution: squeeze-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: dann frazier <dannf@debian.org>
Description: 
 firmware-linux-free - Binary firmware for various drivers in the Linux kernel
 linux-base - Linux image base package
 linux-doc-2.6.32 - Linux kernel specific documentation for version 2.6.32
 linux-headers-2.6.32-5-486 - Header files for Linux 2.6.32-5-486
 linux-headers-2.6.32-5-4kc-malta - Header files for Linux 2.6.32-5-4kc-malta
 linux-headers-2.6.32-5-5kc-malta - Header files for Linux 2.6.32-5-5kc-malta
 linux-headers-2.6.32-5-686 - Header files for Linux 2.6.32-5-686
 linux-headers-2.6.32-5-686-bigmem - Header files for Linux 2.6.32-5-686-bigmem
 linux-headers-2.6.32-5-all - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-alpha - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-amd64 - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-armel - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-hppa - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-i386 - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-ia64 - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-m68k - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-mips - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-mipsel - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-powerpc - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-s390 - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-sh4 - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-sparc - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-all-sparc64 - All header files for Linux 2.6.32 (meta-package)
 linux-headers-2.6.32-5-alpha-generic - Header files for Linux 2.6.32-5-alpha-generic
 linux-headers-2.6.32-5-alpha-legacy - Header files for Linux 2.6.32-5-alpha-legacy
 linux-headers-2.6.32-5-alpha-smp - Header files for Linux 2.6.32-5-alpha-smp
 linux-headers-2.6.32-5-amd64 - Header files for Linux 2.6.32-5-amd64
 linux-headers-2.6.32-5-amiga - Header files for Linux 2.6.32-5-amiga
 linux-headers-2.6.32-5-atari - Header files for Linux 2.6.32-5-atari
 linux-headers-2.6.32-5-bvme6000 - Header files for Linux 2.6.32-5-bvme6000
 linux-headers-2.6.32-5-common - Common header files for Linux 2.6.32-5
 linux-headers-2.6.32-5-common-openvz - Common header files for Linux 2.6.32-5-openvz
 linux-headers-2.6.32-5-common-vserver - Common header files for Linux 2.6.32-5-vserver
 linux-headers-2.6.32-5-common-xen - Common header files for Linux 2.6.32-5-xen
 linux-headers-2.6.32-5-iop32x - Header files for Linux 2.6.32-5-iop32x
 linux-headers-2.6.32-5-itanium - Header files for Linux 2.6.32-5-itanium
 linux-headers-2.6.32-5-ixp4xx - Header files for Linux 2.6.32-5-ixp4xx
 linux-headers-2.6.32-5-kirkwood - Header files for Linux 2.6.32-5-kirkwood
 linux-headers-2.6.32-5-mac - Header files for Linux 2.6.32-5-mac
 linux-headers-2.6.32-5-mckinley - Header files for Linux 2.6.32-5-mckinley
 linux-headers-2.6.32-5-mvme147 - Header files for Linux 2.6.32-5-mvme147
 linux-headers-2.6.32-5-mvme16x - Header files for Linux 2.6.32-5-mvme16x
 linux-headers-2.6.32-5-openvz-686 - Header files for Linux 2.6.32-5-openvz-686
 linux-headers-2.6.32-5-openvz-amd64 - Header files for Linux 2.6.32-5-openvz-amd64
 linux-headers-2.6.32-5-orion5x - Header files for Linux 2.6.32-5-orion5x
 linux-headers-2.6.32-5-parisc - Header files for Linux 2.6.32-5-parisc
 linux-headers-2.6.32-5-parisc-smp - Header files for Linux 2.6.32-5-parisc-smp
 linux-headers-2.6.32-5-parisc64 - Header files for Linux 2.6.32-5-parisc64
 linux-headers-2.6.32-5-parisc64-smp - Header files for Linux 2.6.32-5-parisc64-smp
 linux-headers-2.6.32-5-powerpc - Header files for Linux 2.6.32-5-powerpc
 linux-headers-2.6.32-5-powerpc-smp - Header files for Linux 2.6.32-5-powerpc-smp
 linux-headers-2.6.32-5-powerpc64 - Header files for Linux 2.6.32-5-powerpc64
 linux-headers-2.6.32-5-r4k-ip22 - Header files for Linux 2.6.32-5-r4k-ip22
 linux-headers-2.6.32-5-r5k-cobalt - Header files for Linux 2.6.32-5-r5k-cobalt
 linux-headers-2.6.32-5-r5k-ip32 - Header files for Linux 2.6.32-5-r5k-ip32
 linux-headers-2.6.32-5-s390x - Header files for Linux 2.6.32-5-s390x
 linux-headers-2.6.32-5-sb1-bcm91250a - Header files for Linux 2.6.32-5-sb1-bcm91250a
 linux-headers-2.6.32-5-sb1a-bcm91480b - Header files for Linux 2.6.32-5-sb1a-bcm91480b
 linux-headers-2.6.32-5-sh7751r - Header files for Linux 2.6.32-5-sh7751r
 linux-headers-2.6.32-5-sh7785lcr - Header files for Linux 2.6.32-5-sh7785lcr
 linux-headers-2.6.32-5-sparc64 - Header files for Linux 2.6.32-5-sparc64
 linux-headers-2.6.32-5-sparc64-smp - Header files for Linux 2.6.32-5-sparc64-smp
 linux-headers-2.6.32-5-versatile - Header files for Linux 2.6.32-5-versatile
 linux-headers-2.6.32-5-vserver-686 - Header files for Linux 2.6.32-5-vserver-686
 linux-headers-2.6.32-5-vserver-686-bigmem - Header files for Linux 2.6.32-5-vserver-686-bigmem
 linux-headers-2.6.32-5-vserver-amd64 - Header files for Linux 2.6.32-5-vserver-amd64
 linux-headers-2.6.32-5-vserver-itanium - Header files for Linux 2.6.32-5-vserver-itanium
 linux-headers-2.6.32-5-vserver-mckinley - Header files for Linux 2.6.32-5-vserver-mckinley
 linux-headers-2.6.32-5-vserver-powerpc - Header files for Linux 2.6.32-5-vserver-powerpc
 linux-headers-2.6.32-5-vserver-powerpc64 - Header files for Linux 2.6.32-5-vserver-powerpc64
 linux-headers-2.6.32-5-vserver-s390x - Header files for Linux 2.6.32-5-vserver-s390x
 linux-headers-2.6.32-5-vserver-sparc64 - Header files for Linux 2.6.32-5-vserver-sparc64
 linux-headers-2.6.32-5-xen-686 - Header files for Linux 2.6.32-5-xen-686
 linux-headers-2.6.32-5-xen-amd64 - Header files for Linux 2.6.32-5-xen-amd64
 linux-image-2.6.32-5-486 - Linux 2.6.32 for old PCs
 linux-image-2.6.32-5-4kc-malta - Linux 2.6.32 for MIPS Malta
 linux-image-2.6.32-5-5kc-malta - Linux 2.6.32 for MIPS Malta (64-bit)
 linux-image-2.6.32-5-686 - Linux 2.6.32 for modern PCs
 linux-image-2.6.32-5-686-bigmem - Linux 2.6.32 for PCs with 4GB+ RAM
 linux-image-2.6.32-5-686-bigmem-dbg - Debugging infos for Linux 2.6.32-5-686-bigmem
 linux-image-2.6.32-5-alpha-generic - Linux 2.6.32 for Alpha
 linux-image-2.6.32-5-alpha-legacy - Linux 2.6.32 for Alpha Legacy
 linux-image-2.6.32-5-alpha-smp - Linux 2.6.32 for Alpha SMP
 linux-image-2.6.32-5-amd64 - Linux 2.6.32 for 64-bit PCs
 linux-image-2.6.32-5-amd64-dbg - Debugging infos for Linux 2.6.32-5-amd64
 linux-image-2.6.32-5-amiga - Linux 2.6.32 for Amiga
 linux-image-2.6.32-5-atari - Linux 2.6.32 for Atari
 linux-image-2.6.32-5-bvme6000 - Linux 2.6.32 for BVM BVME4000 and BVME6000
 linux-image-2.6.32-5-iop32x - Linux 2.6.32 for IOP32x
 linux-image-2.6.32-5-itanium - Linux 2.6.32 for Itanium
 linux-image-2.6.32-5-ixp4xx - Linux 2.6.32 for IXP4xx
 linux-image-2.6.32-5-kirkwood - Linux 2.6.32 for Marvell Kirkwood
 linux-image-2.6.32-5-mac - Linux 2.6.32 for Macintosh
 linux-image-2.6.32-5-mckinley - Linux 2.6.32 for Itanium II
 linux-image-2.6.32-5-mvme147 - Linux 2.6.32 for Motorola MVME147
 linux-image-2.6.32-5-mvme16x - Linux 2.6.32 for Motorola MVME162/6/7, MVME172/7
 linux-image-2.6.32-5-openvz-686 - Linux 2.6.32 for modern PCs, OpenVZ support
 linux-image-2.6.32-5-openvz-686-dbg - Debugging infos for Linux 2.6.32-5-openvz-686
 linux-image-2.6.32-5-openvz-amd64 - Linux 2.6.32 for 64-bit PCs, OpenVZ support
 linux-image-2.6.32-5-openvz-amd64-dbg - Debugging infos for Linux 2.6.32-5-openvz-amd64
 linux-image-2.6.32-5-orion5x - Linux 2.6.32 for Marvell Orion
 linux-image-2.6.32-5-parisc - Linux 2.6.32 for 32-bit PA-RISC
 linux-image-2.6.32-5-parisc-smp - Linux 2.6.32 for multiprocessor 32-bit PA-RISC
 linux-image-2.6.32-5-parisc64 - Linux 2.6.32 for 64-bit PA-RISC
 linux-image-2.6.32-5-parisc64-smp - Linux 2.6.32 for multiprocessor 64-bit PA-RISC
 linux-image-2.6.32-5-powerpc - Linux 2.6.32 for uniprocessor 32-bit PowerPC
 linux-image-2.6.32-5-powerpc-smp - Linux 2.6.32 for multiprocessor 32-bit PowerPC
 linux-image-2.6.32-5-powerpc64 - Linux 2.6.32 for 64-bit PowerPC
 linux-image-2.6.32-5-r4k-ip22 - Linux 2.6.32 for SGI IP22
 linux-image-2.6.32-5-r5k-cobalt - Linux 2.6.32 for Cobalt
 linux-image-2.6.32-5-r5k-ip32 - Linux 2.6.32 for SGI IP32
 linux-image-2.6.32-5-s390x - Linux 2.6.32 for IBM zSeries
 linux-image-2.6.32-5-s390x-tape - Linux 2.6.32 for IBM zSeries, IPL from tape
 linux-image-2.6.32-5-sb1-bcm91250a - Linux 2.6.32 for BCM91250A
 linux-image-2.6.32-5-sb1a-bcm91480b - Linux 2.6.32 for BCM91480B
 linux-image-2.6.32-5-sh7751r - Linux 2.6.32 for sh7751r
 linux-image-2.6.32-5-sh7785lcr - Linux 2.6.32 for sh7785lcr
 linux-image-2.6.32-5-sparc64 - Linux 2.6.32 for uniprocessor 64-bit UltraSPARC
 linux-image-2.6.32-5-sparc64-smp - Linux 2.6.32 for multiprocessor 64-bit UltraSPARC
 linux-image-2.6.32-5-versatile - Linux 2.6.32 for Versatile
 linux-image-2.6.32-5-vserver-686 - Linux 2.6.32 for modern PCs, Linux-VServer support
 linux-image-2.6.32-5-vserver-686-bigmem - Linux 2.6.32 for PCs with 4GB+ RAM, Linux-VServer support
 linux-image-2.6.32-5-vserver-686-bigmem-dbg - Debugging infos for Linux 2.6.32-5-vserver-686-bigmem
 linux-image-2.6.32-5-vserver-amd64 - Linux 2.6.32 for 64-bit PCs, Linux-VServer support
 linux-image-2.6.32-5-vserver-amd64-dbg - Debugging infos for Linux 2.6.32-5-vserver-amd64
 linux-image-2.6.32-5-vserver-itanium - Linux 2.6.32 for Itanium, Linux-VServer support
 linux-image-2.6.32-5-vserver-mckinley - Linux 2.6.32 for Itanium II, Linux-VServer support
 linux-image-2.6.32-5-vserver-powerpc - Linux 2.6.32 for uniprocessor 32-bit PowerPC, Linux-VServer suppo
 linux-image-2.6.32-5-vserver-powerpc64 - Linux 2.6.32 for 64-bit PowerPC, Linux-VServer support
 linux-image-2.6.32-5-vserver-s390x - Linux 2.6.32 for IBM zSeries, Linux-VServer support
 linux-image-2.6.32-5-vserver-sparc64 - Linux 2.6.32 for uniprocessor 64-bit UltraSPARC, Linux-VServer su
 linux-image-2.6.32-5-xen-686 - Linux 2.6.32 for modern PCs, Xen dom0 support
 linux-image-2.6.32-5-xen-686-dbg - Debugging infos for Linux 2.6.32-5-xen-686
 linux-image-2.6.32-5-xen-amd64 - Linux 2.6.32 for 64-bit PCs, Xen dom0 support
 linux-image-2.6.32-5-xen-amd64-dbg - Debugging infos for Linux 2.6.32-5-xen-amd64
 linux-libc-dev - Linux support headers for userspace development
 linux-manual-2.6.32 - Linux kernel API manual pages for version 2.6.32
 linux-patch-debian-2.6.32 - Debian patches to version 2.6.32 of the Linux kernel
 linux-source-2.6.32 - Linux kernel source for version 2.6.32 with Debian patches
 linux-support-2.6.32-5 - Support files for Linux 2.6.32
 linux-tools-2.6.32 - Performance analysis tools for Linux 2.6.32
 xen-linux-system-2.6.32-5-xen-686 - Xen system with Linux 2.6.32 on modern PCs (meta-package)
 xen-linux-system-2.6.32-5-xen-amd64 - Xen system with Linux 2.6.32 on 64-bit PCs (meta-package)
Closes: 701744
Changes: 
 linux-2.6 (2.6.32-48squeeze4) squeeze-security; urgency=high
 .
   [ Ian Campbell ]
   * Fix regression in "xen: netback: shutdown the ring if it contains garbage
     (CVE-2013-0216)" (Closes: #701744)
 .
   [ Moritz Muehlenhoff ]
   * drivers/cdrom/cdrom.c: use kzalloc() for failing hardware (CVE-2013-2164)
   * ipv6: ip6_sk_dst_check() must not assume ipv6 dst (CVE-2013-2232)
   * af_key: fix info leaks in notify messages (CVE-2013-2234)
   * af_key: initialize satype in key_notify_policy_flush() (CVE-2013-2237)
   * block: do not pass disk names as format strings (CVE-2013-2851)
   * b43: stop format string leaking into error msgs (CVE-2013-2852)
   * sctp: Use correct sideffect command in duplicate cookie handling
     (CVE-2013-2206)
   * kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
     (CVE-2013-2141)
   * HID: validate HID report id size (CVE-2013-2888)
   * HID: check for NULL field when setting values
   * Information leak in openvz quota implementation (CVE-2013-2239)
 .
   [ dann frazier ]
   * HID: pantherlord: validate output report details (CVE-2013-2892)
Checksums-Sha1: 
 a52f263c2da73d1d62af883c93c121048dbf66cc 7007 linux-2.6_2.6.32-48squeeze4.dsc
 9ec7bac0de565e6c957bc9e707ce9c03d617ae70 16724238 linux-2.6_2.6.32-48squeeze4.diff.gz
 b5d7859e7e0487abc811f8903bb1c16182ebf807 6081012 linux-doc-2.6.32_2.6.32-48squeeze4_all.deb
 67b926f90a7638dab9cf80d1367fe64863ac13fe 2748500 linux-manual-2.6.32_2.6.32-48squeeze4_all.deb
 f506445cdf58e81953c5ce5c35909efe50608a68 10433144 linux-patch-debian-2.6.32_2.6.32-48squeeze4_all.deb
 46a60df5ee1608e4cb276e1426b4a937d5186b3a 65398988 linux-source-2.6.32_2.6.32-48squeeze4_all.deb
 829f83e2a812b784c780fa5f7e8c3060f92aca4b 173892 linux-support-2.6.32-5_2.6.32-48squeeze4_all.deb
 04a02567a9ae932d77d5d8856d44708e26fd51a7 162044 firmware-linux-free_2.6.32-48squeeze4_all.deb
 11668387b09bedb81aacb4f0c78cd83285f7fc9b 184186 linux-base_2.6.32-48squeeze4_all.deb
Checksums-Sha256: 
 9ca9ed5de13fcf3418701dab412bd37992b131b178be2a9a7c76236cfb28014f 7007 linux-2.6_2.6.32-48squeeze4.dsc
 6ae077c111a39f42b04d1c02e0e263b854a15069c2f566c10d1239001bade476 16724238 linux-2.6_2.6.32-48squeeze4.diff.gz
 fc8da74c07b9ba13ea3c5cdf584c5de69d287a35b42f01d288da602a347c6099 6081012 linux-doc-2.6.32_2.6.32-48squeeze4_all.deb
 990fcf3ed9878236adab32419919647c27bca870d5a1688698890670527de60e 2748500 linux-manual-2.6.32_2.6.32-48squeeze4_all.deb
 b3c72d12ed256e716ba2cd83fc95e79eb6dc0262ee0193cf3ec6648ba9d0cb89 10433144 linux-patch-debian-2.6.32_2.6.32-48squeeze4_all.deb
 7bfd489a137af13cde145b067d3ff0eb9ab60351d58b65a05b5598b3a62b2809 65398988 linux-source-2.6.32_2.6.32-48squeeze4_all.deb
 d557ad322e08692aa1edee6e2f9804b823ae9b03b427df5967b59760af0b5185 173892 linux-support-2.6.32-5_2.6.32-48squeeze4_all.deb
 6f8f49796e8428c02ec9c32cdccacf7b6c62fe59fc0e2bb9843df71480646a80 162044 firmware-linux-free_2.6.32-48squeeze4_all.deb
 e7dcc544219d19d97f0c2f75680efce2b4714007996e83d1f4982a4590c8b671 184186 linux-base_2.6.32-48squeeze4_all.deb
Files: 
 994f7491b520c04230bd885e0e8d7c90 7007 kernel optional linux-2.6_2.6.32-48squeeze4.dsc
 0dcfb572a5d7cd42c50af30f0a41fb92 16724238 kernel optional linux-2.6_2.6.32-48squeeze4.diff.gz
 d0ee1d54306087b5bbfdd5e714da5f82 6081012 doc optional linux-doc-2.6.32_2.6.32-48squeeze4_all.deb
 dba7549edd40a83d94b07a41b544c241 2748500 doc optional linux-manual-2.6.32_2.6.32-48squeeze4_all.deb
 d69de1760d78fa7fa44e2ca3d39246b6 10433144 kernel optional linux-patch-debian-2.6.32_2.6.32-48squeeze4_all.deb
 2ce8d0b3939c2d033386d18a20cb1b70 65398988 kernel optional linux-source-2.6.32_2.6.32-48squeeze4_all.deb
 e2c08238220e8d026b79fc9e0878c017 173892 devel optional linux-support-2.6.32-5_2.6.32-48squeeze4_all.deb
 aef3ed7c6656a5170b167b61a5a61aea 162044 kernel optional firmware-linux-free_2.6.32-48squeeze4_all.deb
 5a3fd1791762a0c02b8054564b700879 184186 kernel optional linux-base_2.6.32-48squeeze4_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=Ioq8
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: