-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 14 Oct 2011 08:58:40 +0200 Source: radvd Binary: radvd Architecture: armel Version: 1:1.1-3.1 Distribution: lenny-security Urgency: high Maintainer: armel Build Daemon (alwyn) Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.1-3.1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: aeadcb468dccfb27787ded4a90860cece4f84fe9 68014 radvd_1.1-3.1_armel.deb Checksums-Sha256: 89950dbaf14433782dd63256fe49009a52db07fabccca1e4debcaaff4a6bf71b 68014 radvd_1.1-3.1_armel.deb Files: e1b4a5624eaea546f37d11842c345b16 68014 net optional radvd_1.1-3.1_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOofneAAoJEAE0hOa8i7ttSzkP/jL7ABw1HIFek3IZCM+gvDTL pO6jKSMh/GCDuB6zk4DDoemxrK6htuY4e5Yd6bGvqurvdkoLgIfAB/GdIN9GdiJx +SScLBZUeUAUXER5zX/HjQYhMLrFI4vUalwhIEvi9UlrBsA+uKiGXqzeLMdZHCX3 /sebZF+kn9p9XoaLMWYGajUrBKmlo9mhFtyakioJHOlEBInO7xjo77yk2Edju1Mo s07fl5WsdiuPBmHsBR3VgQyN6Z3lOCmu4oP4Jga91BGTELWuGe93iaTghjyMp8y/ 0N204V+FBtgA42Q53ubFzQTPn/g4l1sdpELpr3zvgFX49GbBgtc0W09UFqwl7TrX t0RrHVEQQPUTv98d8v0TyO6mSmB+/4TUmhIm1D6TuhPfplTwLwLRLFc+iDX4R7AH Lc6zbf3IrFcfUMzNe06ScSBvGtJwLnuOK58scT1YDnJWNFnCAFaSQufiV1PlGulD 3hF2MaDOshb5okQlyEVIF9Dc0l3NaQcy/TH0sBddbk530vPy/AEmUe4JivUXds6h ZCktEeqqv+A3Ha+aAjjs81POXD7jxQcxOCS46ojkBKn1en0m7b82mSKjcKNm5Fju BwuFovRuNAAQeKHM9737iuO4N8W7gnmAuhGPA73uXfRnGHClfD5hexAFY9EhHYbx KKM45fjm2NIy6WHBOLy8 =SX5/ -----END PGP SIGNATURE-----