-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 12 Oct 2011 15:52:53 +0200 Source: radvd Binary: radvd Architecture: i386 Version: 1:1.6-1.1 Distribution: squeeze-security Urgency: high Maintainer: i386 Build Daemon Changed-By: Yves-Alexis Perez Description: radvd - Router Advertisement Daemon Closes: 644614 Changes: radvd (1:1.6-1.1) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * debian/patches: backport patches from upstream to fix various security issues: closes: #644614 - 0001-set_interface_var-doesn-t-check-interface-name-and-b fix arbitrary file overwrite (CVE-2011-3602) - 0002-main-must-fail-on-privsep_init-errors-it-must-not-ru, 0003-privsep_read_loop-should-return-on-unprivileged-daem and 0004-Really-exit-on-privsep-init-failure fix failure to check return code of privilege dropping function (CVE-2011-3603) - 0005-process_ra-has-numerous-missed-len-checks.-It-leads- fix multiple buffer overreads (CVE-2011-3604) - 0006-removing-mdelay-in-unicast-only-case fix a denial of service (CVE-2011-3605) - 0007-checking-iface-name-more-carefully on top of 0001-set_interface_var-doesn-t-check-interface-name-and-b (CVE-2011-3602) Checksums-Sha1: 550dfc9fe93927844ae881f3b8112edcc747d025 69856 radvd_1.6-1.1_i386.deb Checksums-Sha256: b62480e5886ded73bb3d4212d5316c1c65bf4850863054c3ef324a0578f1a8b4 69856 radvd_1.6-1.1_i386.deb Files: d681c3bbfa20e49c9b7f6726e7810767 69856 net optional radvd_1.6-1.1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOoX+uAAoJEGafEd7keGvcAsYQALG/c/xrsUsUcjpktlTfxWyI vzYWJdZ6U1v/AqBMhI+9YVvUBA9bcj2potHSmSqoAWuHB/f7MisthnievBO+V3tt Kk5vNumJLmMOsSg8rWVuoe28zpRnU7TcgaNbHe5ptfL6j/xH6PvHawZE1QH4X0ba gZIvgcSSYSKZnDh9qqu3KyLBwHfIzPpA2HG2MnYCy3kVxkDwD06mbpkpf1Y4hiwy Bz212J4uBdPqhNH1A2KpcQAQ0PeGT5/imF04s/+oZa045GY5CGx6ippUCHdGyB/K mGklVbY0PbFog4Hws3GY697DWWMm+H8PJSgqZPxRbhA7f4SivvkaeaJCfAWeVRZ/ n59kpxygr1Paxi1u7qUASRkJNal1ilO+B06vX5bWiNUCH0ubhl/DczrqRMIZ5uC/ kID5nCy9bnZUo2uHpJ3f8FtHq2JgKKHhFn1s3xIKLirMN7Rjjb8QRjtVPI2qyZUa YOT+LerP4EHni29akeTyVk3U9qToFq0F8BFTpvjCnhG7+C+C6QkFWAzOC0CGUisK YVe5TJ7O4JDHOCLfRo42P5Xw6etbHdJrDgk33EeHdHvx3bpRGYPMbM783e3Pdf4Q u1nOrzkGuj7oaf72EiPfd8XsChOdRdbSOp0/vCz0TUJw2tJtCOdf+0YBgI+4iXZK 8i3HPzfm/IQc09qL7p0A =pQpc -----END PGP SIGNATURE-----