-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 12 Oct 2011 15:52:53 +0200 Source: radvd Binary: radvd Architecture: ia64 Version: 1:1.6-1.1 Distribution: squeeze-security Urgency: high Maintainer: ia64 Build Daemon (mundy) Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.6-1.1) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: b36ccc615820e8036ed4e97a35dcfa9a5a19b182 93214 radvd_1.6-1.1_ia64.deb Checksums-Sha256: 8e081d0811279d9a0d963e3860cc74a3def40fc99c50f4dca6427951edbc4685 93214 radvd_1.6-1.1_ia64.deb Files: 2dec77d7099e882b6dd3d453395985f3 93214 net optional radvd_1.6-1.1_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIbBAEBCAAGBQJOop6vAAoJEHzOw5eW+kj06CkP+JO+tnG2ZHaBMpDC3yK6m8lN 6tdGmqR7O64D/2uXP7B528b7ryskso9eiNqgCTZGIMyAtzdPOCVMXktwxZEW2dg5 yyXJZGLDv2uH6gIr7M/UVmnho+rKeRgHy3EW97ZWD7YMm3Q0Jm7Wf6ShbKZMqXGV l3omEhJ7QYBNVbAjeV5/GXu0tl6rPH6jHeM5Zc3yF1s6j7b00UlASxK/u11oQ1/n O6dsWGA86APPd/p1qNTXjr5oTKD15PKDvMD9PlB9wCwejBR4lx1HRZ6NSc/hSbbI ukgeQHBLb5js4c6HAHsf8lUYwNl9tKgpRYtEN1PEPImRvb+zlRGsbI3Biorv1mbb YHF90uHTlkgHteEeGsHfNnhWvGPe5u0oVOy2RNiRe6kkc+YmZTqyMEqfQRWBBmxF HpErJH+uO6Ots8mflzEFbBMB0W2jYf+6kfix9eb8oAu/1BmJsLr8fIMC6OJ61z15 euM5bXcPRbbGeAaQYReH1i+lR5+GqElWAin1Ckk7Fl4/sj6IUZyqmyGUdlfUDyVi dSfk/s8gKQ/SPwBuyjEAs17R/tuZEqA+5kPixdvhygfD/i9Vd8KT6kNLXZdj7MwB yfZAORMU9MVPjrnDparZ705a/3w7zZPS9o6JHDPzjhfZj6naMvc4goHJ9eLsLzFf 5EilHVf+JGM3SpSDidQ= =kR+g -----END PGP SIGNATURE-----