[kernel] r12523 - in dists/etch/linux-2.6.24/debian: . config patches/bugfix patches/bugfix/all patches/series

[Dann Frazier]

Author: dannf
Date: Wed Dec 24 20:55:05 2008
New Revision: 12523

Log:
merge 2.6.24-6~etchnhalf.7

Added:
   dists/etch/linux-2.6.24/debian/patches/bugfix/all/dont-allow-splice-to-files-opened-with-O_APPEND.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/all/dont-allow-splice-to-files-opened-with-O_APPEND.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/all/inotify-watch-removal-umount-races.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/all/inotify-watch-removal-umount-races.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/all/libertas-fix-buffer-overrun.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/all/libertas-fix-buffer-overrun.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/all/sctp-fix-kernel-panic-while-process-protocol-violation-parameter.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/all/sctp-fix-kernel-panic-while-process-protocol-violation-parameter.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/ext2-avoid-corrupted-directory-printk-floods.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/ext2-avoid-corrupted-directory-printk-floods.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/ext3-avoid-corrupted-directory-printk-floods.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/ext3-avoid-corrupted-directory-printk-floods.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/hfs-fix-namelength-memory-corruption.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/hfs-fix-namelength-memory-corruption.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/hfsplus-check_read_mapping_page-return-value.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/hfsplus-check_read_mapping_page-return-value.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/hfsplus-fix-Buffer-overflow-with-a-corrupted-image.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/hfsplus-fix-Buffer-overflow-with-a-corrupted-image.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/net-unix-gc-fix-soft-lockups-oom-issues.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/net-unix-gc-fix-soft-lockups-oom-issues.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/sctp-fix-oops-when-INIT-ACK-indicates-that-peer-doesnt-support-AUTH.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/sctp-fix-oops-when-INIT-ACK-indicates-that-peer-doesnt-support-AUTH.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/unix-domain-counting-gc.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/unix-domain-counting-gc.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/unix-domain-recursive-descent-abi-ignore.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/unix-domain-recursive-descent-abi-ignore.patch
   dists/etch/linux-2.6.24/debian/patches/bugfix/unix-domain-recursive-descent.patch
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/bugfix/unix-domain-recursive-descent.patch
   dists/etch/linux-2.6.24/debian/patches/series/6~etchnhalf.7
      - copied unchanged from r12522, /releases/linux-2.6.24/2.6.24-6~etchnhalf.7/debian/patches/series/6~etchnhalf.7
Modified:
   dists/etch/linux-2.6.24/debian/changelog
   dists/etch/linux-2.6.24/debian/config/defines

Modified: dists/etch/linux-2.6.24/debian/changelog
==============================================================================
--- dists/etch/linux-2.6.24/debian/changelog	(original)
+++ dists/etch/linux-2.6.24/debian/changelog	Wed Dec 24 20:55:05 2008
@@ -13,6 +13,27 @@
 
  -- dann frazier <dannf at debian.org>  Wed, 24 Dec 2008 11:33:51 -0700
 
+linux-2.6.24 (2.6.24-6~etchnhalf.7) stable-security; urgency=high
+
+  [ Alexander Prinsier ]
+  * unix domain sockets: fix recursive descent in __scm_destroy()
+    and garbage collector counting bug (CVE-2008-5029)
+
+  [ dann frazier ]
+  * Don't allow splicing to files opened with O_APPEND (CVE-2008-4554)
+  * Avoid printk floods when reading corrupted ext[2,3] directories
+    (CVE-2008-3528)
+  * Fix oops in SCTP (CVE-2008-4576)
+  * sctp: Fix possible kernel panic in sctp_sf_abort_violation (CVE-2008-4618)
+  * Fix buffer overflow in hfsplus (CVE-2008-4933)
+  * Fix BUG() in hfsplus (CVE-2008-4934)
+  * Fix stack corruption in hfs (CVE-2008-5025)
+  * Make sendmsg() block during UNIX garbage collection (CVE-2008-5300)
+  * Fix buffer overflow in libertas (CVE-2008-5134)
+  * Fix race conditions between inotify removal and umount (CVE-2008-5182)
+
+ -- dann frazier <dannf at debian.org>  Mon, 01 Dec 2008 23:03:35 -0700
+
 linux-2.6.24 (2.6.24-6~etchnhalf.6) stable-security; urgency=high
 
   * Add missing capability checks in sbni_ioctl (CVE-2008-3525)

Modified: dists/etch/linux-2.6.24/debian/config/defines
==============================================================================
--- dists/etch/linux-2.6.24/debian/config/defines	(original)
+++ dists/etch/linux-2.6.24/debian/config/defines	Wed Dec 24 20:55:05 2008
@@ -1,5 +1,10 @@
 [abi]
 abiname: etchnhalf.1
+ignore-changes:
+ __scm_destroy
+ __scm_send
+ scm_detach_fds
+ scm_fp_dup
 
 [base]
 arches: