[kernel] r9605 - in dists/etch/linux-2.6/debian: . patches/bugfix patches/series

Dann Frazier dannf at alioth.debian.org
Wed Oct 3 17:22:31 UTC 2007


Author: dannf
Date: Wed Oct  3 17:22:31 2007
New Revision: 9605

Log:
* Merge in changes from 2.6.18.dfsg.1-13etch4.
* bugfix/amd64-zero-extend-32bit-ptrace-xen.patch
  [SECURITY] Zero extend all registers after ptrace in 32-bit entry path
  (Xen).
  See CVE-2007-4573
* bugfix/don-t-leak-nt-bit-into-next-task-xen.patch
  [SECURITY] Don't leak NT bit into next task (Xen).
  See CVE-2006-5755
* bugfix/hugetlb-prio_tree-unit-fix.patch
  [SECURITY] Fix misconversion of hugetlb_vmtruncate_list to prio_tree
  which could be used to trigger a BUG_ON() call in exit_mmap.
  See CVE-2007-4133
* bugfix/usb-pwc-disconnect-block.patch
  [SECURITY] Fix issue with unplugging webcams that use the pwc driver.
  If userspace still has the device open it can result, the driver would
  wait for the device to close, blocking the USB subsystem.
  See CVE-2007-5093

Added:
   dists/etch/linux-2.6/debian/patches/bugfix/amd64-zero-extend-32bit-ptrace-xen.patch
      - copied unchanged from r9604, /releases/linux-2.6/2.6.18.dfsg.1-13etch4/debian/patches/bugfix/amd64-zero-extend-32bit-ptrace-xen.patch
   dists/etch/linux-2.6/debian/patches/bugfix/don-t-leak-nt-bit-into-next-task-xen.patch
      - copied unchanged from r9604, /releases/linux-2.6/2.6.18.dfsg.1-13etch4/debian/patches/bugfix/don-t-leak-nt-bit-into-next-task-xen.patch
   dists/etch/linux-2.6/debian/patches/bugfix/hugetlb-prio_tree-unit-fix.patch
      - copied unchanged from r9604, /releases/linux-2.6/2.6.18.dfsg.1-13etch4/debian/patches/bugfix/hugetlb-prio_tree-unit-fix.patch
   dists/etch/linux-2.6/debian/patches/bugfix/usb-pwc-disconnect-block.patch
      - copied unchanged from r9604, /releases/linux-2.6/2.6.18.dfsg.1-13etch4/debian/patches/bugfix/usb-pwc-disconnect-block.patch
   dists/etch/linux-2.6/debian/patches/series/13etch4
      - copied unchanged from r9604, /releases/linux-2.6/2.6.18.dfsg.1-13etch4/debian/patches/series/13etch4
   dists/etch/linux-2.6/debian/patches/series/13etch4-extra
      - copied unchanged from r9604, /releases/linux-2.6/2.6.18.dfsg.1-13etch4/debian/patches/series/13etch4-extra
Modified:
   dists/etch/linux-2.6/debian/changelog

Modified: dists/etch/linux-2.6/debian/changelog
==============================================================================
--- dists/etch/linux-2.6/debian/changelog	(original)
+++ dists/etch/linux-2.6/debian/changelog	Wed Oct  3 17:22:31 2007
@@ -1,8 +1,12 @@
-linux-2.6 (2.6.18.dfsg.1-16) UNRELEASED; urgency=low
+linux-2.6 (2.6.18.dfsg.1-16) UNRELEASED-stable; urgency=high
 
+  [ Bastian Blank ]
   * Add support for w83793 sensor chips. (closes: #444395)
 
- -- Bastian Blank <waldi at debian.org>  Tue, 02 Oct 2007 13:10:53 +0200
+  [ dann frazier ]
+  * Merge in changes from 2.6.18.dfsg.1-13etch4.
+
+ -- dann frazier <dannf at debian.org>  Wed, 03 Oct 2007 11:21:41 -0600
 
 linux-2.6 (2.6.18.dfsg.1-15) stable; urgency=high
 
@@ -41,6 +45,30 @@
 
  -- dann frazier <dannf at debian.org>  Mon, 17 Sep 2007 16:56:07 -0600
 
+linux-2.6 (2.6.18.dfsg.1-13etch4) stable-security; urgency=high
+
+  [ Bastian Blank ]
+  * bugfix/amd64-zero-extend-32bit-ptrace-xen.patch
+    [SECURITY] Zero extend all registers after ptrace in 32-bit entry path
+    (Xen).
+    See CVE-2007-4573
+  * bugfix/don-t-leak-nt-bit-into-next-task-xen.patch
+    [SECURITY] Don't leak NT bit into next task (Xen).
+    See CVE-2006-5755
+
+  [ dann frazier ]
+  * bugfix/hugetlb-prio_tree-unit-fix.patch
+    [SECURITY] Fix misconversion of hugetlb_vmtruncate_list to prio_tree
+    which could be used to trigger a BUG_ON() call in exit_mmap.
+    See CVE-2007-4133
+  * bugfix/usb-pwc-disconnect-block.patch
+    [SECURITY] Fix issue with unplugging webcams that use the pwc driver.
+    If userspace still has the device open it can result, the driver would
+    wait for the device to close, blocking the USB subsystem.
+    See CVE-2007-5093
+
+ -- dann frazier <dannf at debian.org>  Tue, 02 Oct 2007 14:26:18 -0600
+
 linux-2.6 (2.6.18.dfsg.1-13etch3) stable-security; urgency=high
 
   * bugfix/ptrace-handle-bogus-selector.patch,



More information about the Kernel-svn-changes mailing list