-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 14 Oct 2011 08:58:40 +0200 Source: radvd Binary: radvd Architecture: s390 Version: 1:1.1-3.1 Distribution: lenny-security Urgency: high Maintainer: s390 Build Daemon (zandonai) Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.1-3.1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: 80c0c9f4dd589bdd9c6e0898546f6919afd53a14 67754 radvd_1.1-3.1_s390.deb Checksums-Sha256: 4fe4eb6745231b4741abd10074d0c372f698ac5143b0533667914a2496f58403 67754 radvd_1.1-3.1_s390.deb Files: 0405b4c748e740ad7c9f045ed3d51d93 67754 net optional radvd_1.1-3.1_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOon98AAoJEPaODSItlB0mbv4P/3sCGFvVt/tM6bDFEOlxdiIs 2aZtQI91H84GUEVk34xODXzPNjiisgtkEx103aYb6bK2Ze8ROFoVMN3i2u2I2lam vP0zzYxbzCuMvJ3IB8207Ch/aZ+Em5q4qK28j9212ddxjEL2ukSs38P9M5LNg9f0 pjbmpAjWsd2q1b+2zQt5hWU3tfpTPGtkD9D3hYvGiZfKprnZrURm1M8lPKoRAMa/ V97a7U7iOM9VUcMOsnzTVSVWB4r9bz3ZD1uldHLCF/HHpQasiV5NNWED353wSFVv CwA5EsLnbA0xM9DUTMOw/8n0MjAj0wCAyXBCblW1FcQOs7QJi2QvUGW9eBWQj1HH UMis4vurUOsm1QhKsuXZp1aRpXhrd0LNryd45GcLEnLNMq/lTyEaljEbq8+HQ+BD jOqEfz5GKp2k3SIY4sasmuPWleUc+dVgWndiVtYZ0kozwVFBDrd7MJEyxAiCRkxM z/Bj/1WFg7FG7bnzSrIqQwQf6AJE4qZ5F3udtvdWKsU9s7BltX/+mHhrGmEcZxnq 6y1SsF5z29MVsj7LmVOdn9cT3grTi4XpjIcs8PJArQhTdhrI0it/7WEMxO5B30R7 pD64qYNi2CaeG6Fb9hiWKKvHSaf1hSH6dsrEn6n0WzuDFTCGeJeEwtIwI8rgTZYP /3aR+zihkLSAwLC2GAOU =BqRr -----END PGP SIGNATURE-----