[kernel] r6638 - in dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27: debian debian/patches/series

[Dann Frazier]

Author: dannf
Date: Sat May 20 07:21:28 2006
New Revision: 6638

Added:
   dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/218_do_add_counters-race.diff
      - copied unchanged from r6637, /dists/sarge-security/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/do_add_counters-race.dpatch
Modified:
   dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog
   dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/patches/series/2.4.27-10sarge3

Log:
* 218_do_add_counters-race.diff
  [SECURITY] Fix race condition in the do_add_counters() function in
  netfilter that allows local users with CAP_NET_ADMIN capabilities to
  read kernel memory
  See CVE-2006-0039

Modified: dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog
==============================================================================
--- dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog	(original)
+++ dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/changelog	Sat May 20 07:21:28 2006
@@ -44,8 +44,13 @@
     a portion of the floating point state of other processes, possibly exposing
     sensitive information.
     See CVE-2006-1056
+  * 218_do_add_counters-race.diff
+    [SECURITY] Fix race condition in the do_add_counters() function in
+    netfilter that allows local users with CAP_NET_ADMIN capabilities to
+    read kernel memory
+    See CVE-2006-0039
 
- -- dann frazier <dannf at debian.org>  Sat, 20 May 2006 01:02:10 -0500
+ -- dann frazier <dannf at debian.org>  Sat, 20 May 2006 02:20:44 -0500
 
 kernel-source-2.4.27 (2.4.27-10sarge2) stable-security; urgency=high
 

Modified: dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/patches/series/2.4.27-10sarge3
==============================================================================
--- dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/patches/series/2.4.27-10sarge3	(original)
+++ dists/sarge-security/kernel-2.4/source/kernel-source-2.4.27-2.4.27/debian/patches/series/2.4.27-10sarge3	Sat May 20 07:21:28 2006
@@ -9,3 +9,4 @@
 + 215_sctp-fragment-recurse.diff
 + 216_sctp-fragmented-receive-fix.diff
 + 217_amd64-fp-reg-leak.diff
++ 218_do_add_counters-race.diff