[kernel] r8399 - in dists/etch-security/linux-2.6/debian: . patches/bugfix patches/series

[Dann Frazier]

Author: dannf
Date: Mon Mar 26 20:57:37 2007
New Revision: 8399

Added:
   dists/etch-security/linux-2.6/debian/patches/bugfix/listxattr-mem-corruption.patch
      - copied unchanged from r8375, dists/etch-security/linux-2.6/debian/patches/bugfix/listxattr-mem-corruption.patch
   dists/etch-security/linux-2.6/debian/patches/series/12etch1
Modified:
   dists/etch-security/linux-2.6/debian/changelog
Log:
re-include the fix for CVE-2006-5753, which is an ABI breaker

Modified: dists/etch-security/linux-2.6/debian/changelog
==============================================================================
--- dists/etch-security/linux-2.6/debian/changelog	(original)
+++ dists/etch-security/linux-2.6/debian/changelog	Mon Mar 26 20:57:37 2007
@@ -1,3 +1,13 @@
+linux-2.6 (2.6.18.dfsg.1-12etch1) UNRELEASED; urgency=low
+
+  * bugfix/listxattr-mem-corruption.patch
+    [SECURITY] Fix userspace corruption vulnerability caused by
+    incorrectly promoted return values in bad_inode_ops
+    This patch changes the kernel ABI.
+    See CVE-2006-5753
+
+ -- dann frazier <dannf at debian.org>  Mon, 26 Mar 2007 14:46:25 -0600
+
 linux-2.6 (2.6.18.dfsg.1-12) unstable; urgency=low
 
   [ Steve Langasek ]

Added: dists/etch-security/linux-2.6/debian/patches/series/12etch1
==============================================================================
--- (empty file)
+++ dists/etch-security/linux-2.6/debian/patches/series/12etch1	Mon Mar 26 20:57:37 2007
@@ -0,0 +1 @@
++ bugfix/listxattr-mem-corruption.patch