-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 14 Oct 2011 08:58:40 +0200 Source: radvd Binary: radvd Architecture: mipsel Version: 1:1.1-3.1 Distribution: lenny-security Urgency: high Maintainer: mipsel Build Daemon (mayer) Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.1-3.1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: 05dcd618d0624c10bbd1c25de8a980f4c0353374 68590 radvd_1.1-3.1_mipsel.deb Checksums-Sha256: 478d39e7c7ea545aff53bc9320103cddd05da7e3fd379eada6cdbf54a25aa329 68590 radvd_1.1-3.1_mipsel.deb Files: addaf8e03c19f7de05952d01d16b59cd 68590 net optional radvd_1.1-3.1_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCAAGBQJOoZTrAAoJEHR+3TSlYz+Ua5YP/icF76U4N+ZtxePPyWQQPcgc Jgus+gfsmZmNf73xJq1TP05EHACzwJZQJBZB7yE0MtlgRfoEZeg67eInxkW2R1h7 mqO4az+7OJokqeHWTP4UubjZmpB+RL2G7l45tEHaqoLYEIesjKN7L8NWri+PBinK m2R4suyJqa+CurCovQFeyFMNbyr9wfyOEqo6UcsVteRtgDTiQqqdbcgpq1xADxGd Nxfm1gm4eChXErqel3tFaxtWAMudxk7VAcHHhxcsLEHPQFoADhuLvST6LsFBDKad OvHzWy25s2FHnL2p2o7EHBb3NNdCO8IM45ndWnrOflf+ZmpMYo/WSienJ2nSjjG+ LbAUFeFF0G4fqmcNFf66OKadmSK5olfwCMF1ED7Q/h27WuwF2S8FJJcUnNJhvuIV LgrVNfw3g2lGpSlJpJRVP8CvOTuufPUBYyHUmWSXf0E3/DFs2pvB4KtvfqXT/IGf VZKT0s5cz9ZICFpDjKzPXhIbI/ZgVAruismNonGxLHlPyen9N3jlMRd/73GizZqU q2Eo4LtSSE7jfTe4s+IbuQLEFXsbd3wHRqFdRRtK2G8zApEuurZ/agSlpMMdR+15 FN1DbzCgn+m67f+WLZ2iuCPf2SI7Ioh4oh6mwkiXrk6etELx6WG1qeJgQdLng2en SakKIOQbGM3j0/fqjlxv =xR4Q -----END PGP SIGNATURE-----