Author: dannf
Date: Sun Apr  8 22:38:09 2007
New Revision: 8432

Added:
   
dists/etch-security/linux-2.6/debian/patches/bugfix/ipv6_fl_socklist-no-share.patch
      - copied unchanged from r8431, 
dists/sarge-security/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/ipv6_fl_socklist-no-share.dpatch
Modified:
   dists/etch-security/linux-2.6/debian/changelog
   dists/etch-security/linux-2.6/debian/patches/series/12etch1
Log:
* bugfix/ipv6_fl_socklist-no-share.patch
  [SECURITY] Fix local DoS vulnerability caused by inadvertently sharing
  ipv6_fl_socklist between the listening socket and the socket created
  for connection.
  See CVE-2007-1592

Modified: dists/etch-security/linux-2.6/debian/changelog
==============================================================================
--- dists/etch-security/linux-2.6/debian/changelog      (original)
+++ dists/etch-security/linux-2.6/debian/changelog      Sun Apr  8 22:38:09 2007
@@ -11,8 +11,13 @@
   * bugfix/cm4040-buffer-overflow.patch
     [SECURITY] Fix a buffer overflow in the Omnikey CardMan 4040 driver
     See CVE-2007-0005
+  * bugfix/ipv6_fl_socklist-no-share.patch
+    [SECURITY] Fix local DoS vulnerability caused by inadvertently sharing
+    ipv6_fl_socklist between the listening socket and the socket created
+    for connection.
+    See CVE-2007-1592
 
- -- dann frazier <[EMAIL PROTECTED]>  Sun, 08 Apr 2007 16:16:03 -0600
+ -- dann frazier <[EMAIL PROTECTED]>  Sun, 08 Apr 2007 16:30:41 -0600
 
 linux-2.6 (2.6.18.dfsg.1-12) unstable; urgency=low
 

Modified: dists/etch-security/linux-2.6/debian/patches/series/12etch1
==============================================================================
--- dists/etch-security/linux-2.6/debian/patches/series/12etch1 (original)
+++ dists/etch-security/linux-2.6/debian/patches/series/12etch1 Sun Apr  8 
22:38:09 2007
@@ -2,3 +2,4 @@
 + bugfix/appletalk-endianness-annotations.patch
 + bugfix/appletalk-length-mismatch.patch
 + bugfix/cm4040-buffer-overflow.patch
++ bugfix/ipv6_fl_socklist-no-share.patch

_______________________________________________
Kernel-svn-changes mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/kernel-svn-changes

Reply via email to