Version in base suite: 2.6.8-13 Version in overlay suite: 2.6.8-13sarge1 Base version: kernel-patch-powerpc-2.6.8_2.6.8-13 Target version: kernel-patch-powerpc-2.6.8_2.6.8-13sarge1 Base file: /org/ftp.debian.org/ftp/pool/main/k/kernel-patch-powerpc-2.6.8/kernel-patch-powerpc-2.6.8_2.6.8-13.dsc Target file: /org/ftp.debian.org/ftp/pool/main/k/kernel-patch-powerpc-2.6.8/kernel-patch-powerpc-2.6.8_2.6.8-13sarge1.dsc diff -Nru /tmp/JPBmgGNJav/kernel-patch-powerpc-2.6.8-2.6.8/debian/changelog /tmp/K1Pi7zK7xM/kernel-patch-powerpc-2.6.8-2.6.8/debian/changelog --- /tmp/JPBmgGNJav/kernel-patch-powerpc-2.6.8-2.6.8/debian/changelog 2007-05-26 10:08:06.000000000 +0000 +++ /tmp/K1Pi7zK7xM/kernel-patch-powerpc-2.6.8-2.6.8/debian/changelog 2008-02-20 03:55:03.000000000 +0000 @@ -1,3 +1,82 @@ +kernel-patch-powerpc-2.6.8 (2.6.8-13sarge1) oldstable-security; urgency=high + + * Rebuild against kernel-tree-2.6.8-17sarge1 + * compat_sys_mount-NULL-data_page.dpatch + [SECURITY] Fix oops in compat_sys_mount triggered by NULL data_page + See CVE-2006-7203 + * pppoe-socket-release-mem-leak.dpatch + [SECURITY] fix unpriveleged memory leak when a PPPoE socket is released + after connect but before PPPIOCGCHAN ioctl is called upon it + See CVE-2007-2525 + * dn_fib-out-of-bounds.dpatch, ipv4-fib_props-out-of-bounds.dpatch + [SECURITY] Fix out of bounds condition in dn_fib_props[] + See CVE-2007-2172 + * aacraid-ioctl-perm-check.dpatch + [SECURITY] Require admin capabilities to issue ioctls to aacraid devices + See CVE-2007-4308 + * reset-pdeathsig-on-suid.dpatch + [SECURITY] Fix potential privilege escalation caused by improper + clearing of the child process' pdeath signal. + See CVE-2007-3848 + * bluetooth-l2cap-hci-info-leaks.dpatch + [SECURITY] Fix information leaks in setsockopt() implementations + See CVE-2007-1353 + * coredump-only-to-same-uid.dpatch + [SECURITY] Fix an issue where core dumping over a file that + already exists retains the ownership of the original file + See CVE-2007-6206 + * i4l-isdn_ioctl-mem-overrun.dpatch + [SECURITY] Fix potential isdn ioctl memory overrun + See CVE-2007-6151 + * cramfs-check-block-length.dpatch + [SECURITY] Add a sanity check of the block length in cramfs_readpage to + avoid a potential oops condition + See CVE-2006-5823 + * ext2-skip-pages-past-num-blocks.dpatch + [SECURITY] Add some sanity checking for a corrupted i_size in + ext2_find_entry() + See CVE-2006-6054 + * minixfs-printk-hang.dpatch + [SECURITY] Rate-limit printks caused by accessing a corrupted minixfs + filesystem that would otherwise cause a system to hang (printk storm) + See CVE-2006-6058 + * isdn-net-overflow.dpatch + [SECURITY] Fix potential overflows in the ISDN subsystem + See CVE-2007-6063 + * prevent-stack-growth-into-hugetlb-region.dpatch + [SECURITY] Prevent OOPS during stack expansion when the VMA crosses + into address space reserved for hugetlb pages. + See CVE-2007-3739 + * cifs-honor-umask.dpatch + [SECURITY] Make CIFS honor a process' umask + See CVE-2007-3740 + * hugetlb-prio_tree-unit-fix.dpatch + [SECURITY] Fix misconversion of hugetlb_vmtruncate_list to prio_tree + which could be used to trigger a BUG_ON() call in exit_mmap. + See CVE-2007-4133 + * amd64-zero-extend-32bit-ptrace.dpatch + [SECURITY] Zero extend all registers after ptrace in 32-bit entry path. + See CVE-2007-4573 + * usb-pwc-disconnect-block.dpatch + [SECURITY] Fix issue with unplugging webcams that use the pwc driver. + If userspace still has the device open it can result, the driver would + wait for the device to close, blocking the USB subsystem. + See CVE-2007-5093 + * powerpc-chrp-null-deref.dpatch + [SECURITY][powerpc] Fix NULL pointer dereference if get_property + fails on the subarchitecture + See CVE-2007-6694 + * random-bound-check-ordering.dpatch + [SECURITY] Fix stack-based buffer overflow in the random number + generator + See CVE-2007-3105 + * mmap-VM_DONTEXPAND.dpatch + [SECURITY] Add VM_DONTEXPAND to vm_flags in drivers that register + a fault handler but do not bounds check the offset argument + See CVE-2008-0007 + + -- dann frazier Tue, 19 Feb 2008 20:54:09 -0700 + kernel-patch-powerpc-2.6.8 (2.6.8-13) oldstable; urgency=high * Rebuild against kernel-tree-2.6.8-17 diff -Nru /tmp/JPBmgGNJav/kernel-patch-powerpc-2.6.8-2.6.8/debian/control /tmp/K1Pi7zK7xM/kernel-patch-powerpc-2.6.8-2.6.8/debian/control --- /tmp/JPBmgGNJav/kernel-patch-powerpc-2.6.8-2.6.8/debian/control 2007-05-26 10:16:21.000000000 +0000 +++ /tmp/K1Pi7zK7xM/kernel-patch-powerpc-2.6.8-2.6.8/debian/control 2008-02-19 23:12:26.000000000 +0000 @@ -1,7 +1,7 @@ Source: kernel-patch-powerpc-2.6.8 Section: devel Priority: optional -Build-Depends: debhelper (>=4), bzip2, kernel-package, kernel-tree-2.6.8-17, m4, module-init-tools +Build-Depends: debhelper (>=4), bzip2, kernel-package, kernel-tree-2.6.8-17sarge1, m4, module-init-tools Maintainer: Debian Kernel Team Uploaders: Sven Luther Standards-Version: 3.6.1 diff -Nru /tmp/JPBmgGNJav/kernel-patch-powerpc-2.6.8-2.6.8/debian/rules /tmp/K1Pi7zK7xM/kernel-patch-powerpc-2.6.8-2.6.8/debian/rules --- /tmp/JPBmgGNJav/kernel-patch-powerpc-2.6.8-2.6.8/debian/rules 2007-05-26 10:08:04.000000000 +0000 +++ /tmp/K1Pi7zK7xM/kernel-patch-powerpc-2.6.8-2.6.8/debian/rules 2008-02-20 03:54:58.000000000 +0000 @@ -11,7 +11,7 @@ OFFICIAL_VERSION = No # This is the kernel-tree version we build against -ktver = 17 +ktver = 17sarge1 # set the build architecture if necessary DEB_HOST_ARCH ?= $(shell dpkg --print-architecture)