[kernel] r7241 - dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian

Dann Frazier dannf at costa.debian.org
Sun Aug 27 03:32:37 UTC 2006


Author: dannf
Date: Sun Aug 27 03:32:35 2006
New Revision: 7241

Modified:
   dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog

Log:
* [ERRATA] 213_madvise_remove-restrict.diff
  [SECURITY] The 2.4.27-10sarge3 changelog associated this patch with
  CVE-2006-1524. However, this patch fixes an mprotect issue that was
  split off from the original report into CVE-2006-2071. 2.4.27 is not
  vulnerable to CVE-2006-1524 the madvise_remove issue.
  See CVE-2006-2071

Modified: dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog
==============================================================================
--- dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog	(original)
+++ dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog	Sun Aug 27 03:32:35 2006
@@ -1,5 +1,11 @@
 kernel-source-2.4.27 (2.4.27-10sarge4) UNRELEASED; urgency=high
 
+  * [ERRATA] 213_madvise_remove-restrict.diff
+    [SECURITY] The 2.4.27-10sarge3 changelog associated this patch with
+    CVE-2006-1524. However, this patch fixes an mprotect issue that was
+    split off from the original report into CVE-2006-2071. 2.4.27 is not
+    vulnerable to CVE-2006-1524 the madvise_remove issue.
+    See CVE-2006-2071
   * 223_nfs-handle-long-symlinks.diff
     [SECURITY] Fix buffer overflow in NFS readline handling that allows a
     remote server to cause a denial of service (crash) via a long symlink
@@ -14,7 +20,7 @@
     a dio/mmap and cause the sg driver to oops.
     See CVE-2006-1528
 
- -- dann frazier <dannf at debian.org>  Thu, 17 Aug 2006 00:35:53 -0600
+ -- dann frazier <dannf at debian.org>  Sat, 26 Aug 2006 21:30:40 -0600
 
 kernel-source-2.4.27 (2.4.27-10sarge3) stable-security; urgency=high
 



More information about the Kernel-svn-changes mailing list