-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 12 Oct 2011 15:52:53 +0200 Source: radvd Binary: radvd Architecture: s390 Version: 1:1.6-1.1 Distribution: squeeze-security Urgency: high Maintainer: s390 Build Daemon (zandonai) Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.6-1.1) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: c44c54a0356e9aeafb2bd32d3d3422b28d6eff77 75232 radvd_1.6-1.1_s390.deb Checksums-Sha256: fb8bff270558f7ffb740abe28980c81b8eb817b0fb88d93eceed022d000a2c98 75232 radvd_1.6-1.1_s390.deb Files: 2648c5b8387c4ef139cbaf55efe66261 75232 net optional radvd_1.6-1.1_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOof/SAAoJEPaODSItlB0mJQMP/iw2rPk9sDGrWGEcnD6lU4Dr gsMIm/ipW5bqCZYnruRBmkX1amo4RzXhhxpAYDdcv9gsuTpZyri7bwKHBQ7vythr gOrotst0vFURI1BByDWgd1El6yAG6+VebZXMXWtxnnx5Ym0tLhFZWouIBcX/Svus T4RupoJYOMPoF+cQaVRKndMkBTF96vtpAw/v/1a51IpYXEKrk6ZPa7PJK2VC4Ioh e2maMJ8++DkvqtBs8N7mtouWUsQvWt/bBNAntzNDqysKrqiucpD3Gtwhbps2fLvA p13TxaK0CFAex33owPKkV73G/yof91oIqbTIwjiV/sLFN6HaMiNBgpsexq+Y95di cO2C11T8dKf4rA2qJOsvT/GjcjVE4ObHgl43axytw1GfIDfTA1BJDsg4CM3CcjvI wMfkLeGlellh0ihKjmDxpY6T9mnexSx/oxXU8dglCZjtQ2M/iagBj5y5++tFlJTO f6Q9EOv6HfsotH3+BUtVgTZoJ4s9dU5xG+FHehyO1eG9S4KmclP+4uUnAfpbB2CD sAsXc+W21gNlB9n9VUvHuK8IChN43rgBq50SOu0BhtPMUEULke/4kliZX7zjSot+ dfAIKQED6oPe+hMPFdEYZjR8voh6nMBGJnw27btY9UvFLZ+ZvQYb837PCjqcfkOs yurEq3GLMilgSE7VK4f9 =FU6o -----END PGP SIGNATURE-----