-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 14 Oct 2011 08:58:40 +0200 Source: radvd Binary: radvd Architecture: ia64 Version: 1:1.1-3.1 Distribution: lenny-security Urgency: high Maintainer: ia64 Build Daemon (mundy) Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.1-3.1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: ddcdac915a1086a7970dfa5ebd8d426456b4166a 84236 radvd_1.1-3.1_ia64.deb Checksums-Sha256: 11665066c0a43854eb19038a4f2977a64d08b2bd3c3eab0723e056e30332646d 84236 radvd_1.1-3.1_ia64.deb Files: 3a4b7b236c2cd588ffe0c32b332f4424 84236 net optional radvd_1.1-3.1_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOop9SAAoJEHzOw5eW+kj0YbEP/0mUfkR5nYWvfXtGS2VQA109 ScGac6BisPGdzn2ZbaKRgiUFjOq36d+mv66vxUDt2dsqSLIQNcv5wkTqouGy16TT Mi8DR1m2b9sqJ1B6WlVgMWUI3RCl1heTgceW3yzF2dRiqz5ozpZ7JpqwI/BUxsyH 1eAPqTqqaHwwU7Tagh3/IvZ49jGXILuuu8/KwuCKWV6WEWa2gIaYWR4DQ+jWocGj /x05hyHfvjUdO6lOus538DsJvZDvLUuG4Z1ij8ECbav9pfHdvrgcd1yBSSY+JFGB LCDAd3uNCCM/k8iWllCuFPGzDMKY2itoXAAxtfUq2K4vUsDtxT6nzYDHlEmF3Y3I fe4Wrex6TGBSpdE8fQbNeIu+flNqCScvBUGSMtosZ5V3c/Xya5nKq/1BIBQ7XqE1 HRujUFVlHJ5g043N55l6xjY8um9kft+9luHQc/VgZd0/XPH4PFccMgMuoDfxUZ+h Sy2+TvcgirYdOiUCGiNkqRcUm/rJ+1/mNrdTiKjuwF2lyFTWOMhByA4pGd/154fn ZLyPt9dpbC6jeLgy3Qby2OpTehyCIQIjvkh081T2LfWJQEoVV7+9jhzZb7J3zyEh 25MdCzuNcFHNrUeSeiEAVqQJriKin7A7Lw6WhT+5SsW5Eg0QQ2lpRhhOL72pBCAd wAVjoW2ZWKEHCJmdtQfP =wD82 -----END PGP SIGNATURE-----