[kernel] r8423 - in dists/etch/linux-2.6/debian: . patches/bugfix patches/series

[Dann Frazier]

Author: dannf
Date: Thu Apr  5 22:55:00 2007
New Revision: 8423

Added:
   dists/etch/linux-2.6/debian/patches/bugfix/core-dump-unreadable-PT_INTERP.patch
      - copied unchanged from r8422, dists/etch-security/linux-2.6/debian/patches/bugfix/core-dump-unreadable-PT_INTERP.patch
   dists/etch/linux-2.6/debian/patches/bugfix/listxattr-mem-corruption.patch
      - copied unchanged from r8422, dists/etch-security/linux-2.6/debian/patches/bugfix/listxattr-mem-corruption.patch
   dists/etch/linux-2.6/debian/patches/series/13
Modified:
   dists/etch/linux-2.6/debian/changelog
Log:
merge etch-security->etch

Modified: dists/etch/linux-2.6/debian/changelog
==============================================================================
--- dists/etch/linux-2.6/debian/changelog	(original)
+++ dists/etch/linux-2.6/debian/changelog	Thu Apr  5 22:55:00 2007
@@ -1,12 +1,24 @@
 linux-2.6 (2.6.18.dfsg.1-13) UNRELEASED; urgency=low
 
+  [ Bastian Blank ]
   * [vserver] Fix overflow in network accounting. (closes: #412132)
   * [vserver] Fix lock accounting. (closes: #417631)
   * Bump ABI to 5.
   * Make modules packages binnmuable.
   * [sparc] Enable Qlogic QLA SCSI support. (closes: #417629)
 
- -- Bastian Blank <waldi at debian.org>  Tue, 03 Apr 2007 23:26:42 +0200
+  [ dann frazier ]
+  * bugfix/listxattr-mem-corruption.patch
+    [SECURITY] Fix userspace corruption vulnerability caused by
+    incorrectly promoted return values in bad_inode_ops
+    This patch changes the kernel ABI.
+    See CVE-2006-5753
+  * bugfix/core-dump-unreadable-PT_INTERP.patch
+    [SECURITY] Fix a vulnerability that allows local users to read
+    otherwise unreadable (but executable) files by triggering a core dump.
+    See CVE-2007-0958
+
+ -- dann frazier <dannf at debian.org>  Wed, 04 Apr 2007 01:38:23 -0600
 
 linux-2.6 (2.6.18.dfsg.1-12) unstable; urgency=low
 

Added: dists/etch/linux-2.6/debian/patches/series/13
==============================================================================
--- (empty file)
+++ dists/etch/linux-2.6/debian/patches/series/13	Thu Apr  5 22:55:00 2007
@@ -0,0 +1,2 @@
++ bugfix/listxattr-mem-corruption.patch
++ bugfix/core-dump-unreadable-PT_INTERP.patch