/[kernel]/dists/sarge-security
ViewVC logotype

Log of /dists/sarge-security

View Directory Listing Directory Listing


Sticky Revision:
(Current path doesn't exist after revision 11017)

Revision 5996 - Directory Listing
Modified Wed Mar 1 01:20:06 2006 UTC (7 years, 2 months ago) by dannf
all known dependent packages are noted now

Revision 5876 - Directory Listing
Modified Tue Feb 14 04:13:25 2006 UTC (7 years, 3 months ago) by dannf
initial commit; packages that might be rebuild triggered by updated kernel packages

Revision 5864 - Directory Listing
Modified Mon Feb 13 04:40:58 2006 UTC (7 years, 3 months ago) by dannf
this should be under kernel-2.4

Revision 5863 - Directory Listing
Modified Mon Feb 13 04:18:46 2006 UTC (7 years, 3 months ago) by dannf
update kernel-latest-* to use the new ABI

Revision 5862 - Directory Listing
Modified Mon Feb 13 02:08:40 2006 UTC (7 years, 3 months ago) by dannf
s/2.4/2.6/

Revision 5861 - Directory Listing
Modified Mon Feb 13 02:08:18 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.6-alpha to the sarge-security branch

Revision 5855 - Directory Listing
Modified Mon Feb 13 01:55:37 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-powerpc to the sarge-security branch

Revision 5854 - Directory Listing
Modified Mon Feb 13 01:54:46 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.6-sparc to the sarge-security branch

Revision 5853 - Directory Listing
Modified Mon Feb 13 01:54:12 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.6-i386 to the sarge-security branch

Revision 5849 - Directory Listing
Modified Mon Feb 13 01:45:52 2006 UTC (7 years, 3 months ago) by dannf
2.6, not 2.4

Revision 5848 - Directory Listing
Modified Mon Feb 13 01:44:31 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.6-hppa to the sarge-security branch

Revision 5844 - Directory Listing
Modified Mon Feb 13 01:36:44 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.6-amd64 to the sarge-security branch

Revision 5842 - Directory Listing
Modified Mon Feb 13 01:30:50 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.6-alpha to the sarge-security branch

Revision 5841 - Directory Listing
Modified Mon Feb 13 01:30:03 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.4-sparc to the sarge-security branch

Revision 5840 - Directory Listing
Modified Mon Feb 13 01:29:06 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.4-s390 to the sarge-security branch

Revision 5838 - Directory Listing
Modified Mon Feb 13 01:25:19 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.4-i386 to the sarge-security branch

Revision 5837 - Directory Listing
Modified Mon Feb 13 01:14:36 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.4-alpha to the sarge-security branch

Revision 5836 - Directory Listing
Modified Mon Feb 13 01:14:20 2006 UTC (7 years, 3 months ago) by dannf
oops; branched at wrong level - reverting

Revision 5835 - Directory Listing
Modified Mon Feb 13 01:13:29 2006 UTC (7 years, 3 months ago) by dannf
add kernel-latest-2.4-alpha to the sarge-security branch

Revision 5834 - Directory Listing
Modified Sun Feb 12 19:57:42 2006 UTC (7 years, 3 months ago) by dannf
* Build fix for 206_s390-sacf-fix.diff (CAN-2004-0887) from new
  kernel-tree.

Revision 5833 - Directory Listing
Modified Sun Feb 12 17:54:05 2006 UTC (7 years, 3 months ago) by dannf
* Add an ABI string to the package name.  Use -3 to be consistent with most
  other architectures.

Revision 5832 - Directory Listing
Modified Sun Feb 12 17:37:47 2006 UTC (7 years, 3 months ago) by dannf
some more abi addition fixes

Revision 5800 - Directory Listing
Modified Fri Feb 10 05:34:38 2006 UTC (7 years, 3 months ago) by dannf
control is autogenerated; stop keeping it in svn

Revision 5799 - Directory Listing
Modified Fri Feb 10 05:21:40 2006 UTC (7 years, 3 months ago) by dannf
-p0'ify

Revision 5798 - Directory Listing
Modified Fri Feb 10 04:59:12 2006 UTC (7 years, 3 months ago) by dannf
make it a -p0 patch

Revision 5797 - Directory Listing
Modified Thu Feb 9 21:40:16 2006 UTC (7 years, 3 months ago) by dannf
* Add missing build-dep on module-init-tools

Revision 5796 - Directory Listing
Modified Thu Feb 9 21:39:15 2006 UTC (7 years, 3 months ago) by dannf
add abiname to kernel-headers deb

Revision 5795 - Directory Listing
Modified Thu Feb 9 21:27:48 2006 UTC (7 years, 3 months ago) by dannf
make version string more consistent with previous releases & set urgency to high

Revision 5794 - Directory Listing
Modified Thu Feb 9 21:09:26 2006 UTC (7 years, 3 months ago) by dannf
allow non-digits in kernel-tree ver; needed for "sargeN" substrings

Revision 5792 - Directory Listing
Modified Thu Feb 9 21:00:54 2006 UTC (7 years, 3 months ago) by dannf
Load kernel-image-2.4.27-arm-2.4.27 into
dists/sarge-security/kernel-2.4/arm/kernel-image-2.4.27-arm-2.4.27.

Revision 5790 - Directory Listing
Modified Thu Feb 9 20:59:08 2006 UTC (7 years, 3 months ago) by dannf
Load kernel-image-2.4.27-arm-2.4.27 into
dists/sarge-security/kernel-2.4/arm/kernel-image-2.4.27-arm-2.4.27.

Revision 5788 - Directory Listing
Modified Thu Feb 9 20:57:02 2006 UTC (7 years, 3 months ago) by dannf
Load kernel-image-2.4.27-arm-2.4.27 into
dists/sarge-security/kernel-2.4/arm/kernel-image-2.4.27-arm-2.4.27.

Revision 5787 - Directory Listing
Modified Thu Feb 9 20:56:48 2006 UTC (7 years, 3 months ago) by dannf
Create directories to load project into.
  
  * dists/sarge-security/kernel-2.4/arm/kernel-image-2.4.27-arm-2.4.27:
  New directory.
  * releases/kernel-2.4/arm/kernel-image-2.4.27-arm-2.4.27: New
  directory.

Revision 5785 - Directory Listing
Modified Thu Feb 9 20:52:58 2006 UTC (7 years, 3 months ago) by dannf
Load kernel-patch-2.4.27-arm-2.4.27 into
dists/sarge-security/kernel-2.4/arm/kernel-patch-2.4.27-arm-2.4.27.

Revision 5783 - Directory Listing
Modified Thu Feb 9 20:49:31 2006 UTC (7 years, 3 months ago) by dannf
Load kernel-patch-2.4.27-arm-2.4.27 into
dists/sarge-security/kernel-2.4/arm/kernel-patch-2.4.27-arm-2.4.27.

Revision 5782 - Directory Listing
Modified Thu Feb 9 20:49:17 2006 UTC (7 years, 3 months ago) by dannf
Create directories to load project into.
  
  * dists/sarge-security/kernel-2.4/arm: New directory.
  * dists/sarge-security/kernel-2.4/arm/kernel-patch-2.4.27-arm-2.4.27:
  New directory.
  * releases/kernel-2.4/arm: New directory.
  * releases/kernel-2.4/arm/kernel-patch-2.4.27-arm-2.4.27: New
  directory.

Revision 5774 - Directory Listing
Modified Thu Feb 9 08:05:41 2006 UTC (7 years, 3 months ago) by dannf
put the alpha image in a subdir that matches the kernel name, for consistency with other archs [3/3]

Revision 5773 - Directory Listing
Modified Thu Feb 9 08:05:27 2006 UTC (7 years, 3 months ago) by dannf
put the alpha image in a subdir that matches the kernel name, for consistency with other archs [2/3]

Revision 5772 - Directory Listing
Modified Thu Feb 9 08:05:12 2006 UTC (7 years, 3 months ago) by dannf
put the alpha image in a subdir that matches the kernel name, for consistency with other archs [1/3]

Revision 5770 - Directory Listing
Modified Thu Feb 9 07:19:37 2006 UTC (7 years, 3 months ago) by horms
  * Build against kernel source 2.4.27-10sarge2
  * Use a build dependancy on kernel-tree-2.4.27-10sarge2 rather than
    a versioned build dependancy on kernel-source-2.4.27

Revision 5768 - Directory Listing
Modified Thu Feb 9 07:18:26 2006 UTC (7 years, 3 months ago) by horms
  * Build against kernel source 2.4.27-10sarge2
  * Use a build dependancy on kernel-tree-2.4.27-10sarge2 rather than
    a versioned build dependancy on kernel-source-2.4.27

Revision 5752 - Directory Listing
Modified Wed Feb 8 10:58:58 2006 UTC (7 years, 3 months ago) by horms
add ABI warning

Revision 5750 - Directory Listing
Modified Wed Feb 8 10:56:20 2006 UTC (7 years, 3 months ago) by horms
199_ptrace-fix_self-attach_rule.diff -> 201_ptrace-fix_self-attach_rule.diff

Revision 5747 - Directory Listing
Modified Wed Feb 8 10:46:59 2006 UTC (7 years, 3 months ago) by horms
cosmetics

Revision 5744 - Directory Listing
Modified Wed Feb 8 10:23:48 2006 UTC (7 years, 3 months ago) by horms
orinoco.c not hermes.c

Revision 5743 - Directory Listing
Modified Wed Feb 8 10:22:52 2006 UTC (7 years, 3 months ago) by horms
Actually remove 194_xfs-inode-race.diff from the series

Revision 5742 - Directory Listing
Modified Wed Feb 8 10:17:25 2006 UTC (7 years, 3 months ago) by horms
192_orinoco-info-leak-2.diff was missing from the previous commit

Revision 5741 - Directory Listing
Modified Wed Feb 8 09:51:56 2006 UTC (7 years, 3 months ago) by horms
Add 192_orinoco-info-leak-2.diff: See #344036

Revision 5735 - Directory Listing
Modified Wed Feb 8 04:12:14 2006 UTC (7 years, 3 months ago) by horms
Minor changelog updates to bring into line with 2.4.27-13

Revision 5734 - Directory Listing
Modified Wed Feb 8 03:21:15 2006 UTC (7 years, 3 months ago) by horms
Remove 194_xfs-inode-race.diff for now. Its an extensive patch. It has no CVE. And it causes at least one bug which requites another extensive patch to fix. (See: #343970)

Revision 5731 - Directory Listing
Modified Tue Feb 7 18:04:22 2006 UTC (7 years, 3 months ago) by dannf
revert 5719; horms & moritz believe this fixes a problem that didn't exist till 2.6.12, and may actually cause additional problems in 2.6.8

Revision 5720 - Directory Listing
Modified Tue Feb 7 05:45:29 2006 UTC (7 years, 3 months ago) by horms
kernel-patch-powerpc-2.4.27 2.4.27-10sarge2

Revision 5719 - Directory Listing
Modified Tue Feb 7 05:41:39 2006 UTC (7 years, 3 months ago) by dannf
* ip_options_echo-extra-dst.dpatch
  [SECURITY] Bypass ip_rt_put() call in icmp_send to fix a remote DoS
  vulnerability.
  See CVE-2006-0454

Revision 5715 - Directory Listing
Modified Tue Feb 7 02:39:50 2006 UTC (7 years, 3 months ago) by horms
kernel-source-2.4.27 2.4.27-10sarge2

Revision 5711 - Directory Listing
Modified Mon Feb 6 06:58:37 2006 UTC (7 years, 3 months ago) by dannf
fix backported patch; "nodes" was the bitmap prior to nodemap_t when it becames nodes->bits

Revision 5703 - Directory Listing
Modified Sat Feb 4 04:41:14 2006 UTC (7 years, 3 months ago) by jurij-guest
Correct sparc64-clock-settime.dpatch to reference
only the compat_clock_* functions, not the 
compat_sys_clock_* ones, as the latter are not
present in 2.6.8.

Revision 5690 - Directory Listing
Modified Thu Feb 2 16:41:01 2006 UTC (7 years, 3 months ago) by dannf
fix builds by adding missing valid_signal() macro

Revision 5686 - Directory Listing
Modified Thu Feb 2 08:22:56 2006 UTC (7 years, 3 months ago) by dannf
DEFINE_SPINLOCK macro didn't exist in 2.6.8

Revision 5685 - Directory Listing
Modified Thu Feb 2 04:56:55 2006 UTC (7 years, 3 months ago) by dannf
s/\.patch/\.dpatch/

Revision 5679 - Directory Listing
Modified Wed Feb 1 07:46:28 2006 UTC (7 years, 3 months ago) by dannf
* Build against 2.4.27-10sarge2
* Increment ABI to -3

Revision 5678 - Directory Listing
Modified Wed Feb 1 07:45:08 2006 UTC (7 years, 3 months ago) by dannf
* Increment ABI to -3

Revision 5677 - Directory Listing
Modified Wed Feb 1 07:43:19 2006 UTC (7 years, 3 months ago) by dannf
* Build against kernel-tree-2.4.27-10sarge2
* Increment ABI to -3

Revision 5676 - Directory Listing
Modified Wed Feb 1 07:42:19 2006 UTC (7 years, 3 months ago) by dannf
* Build against kernel-tree-2.4.27-10sarge2
* Increment ABI to -3

Revision 5675 - Directory Listing
Modified Wed Feb 1 07:40:19 2006 UTC (7 years, 3 months ago) by dannf
* Build against kernel-tree-2.4.27-10sarge2
* Increment ABI to -3

Revision 5674 - Directory Listing
Modified Wed Feb 1 07:39:07 2006 UTC (7 years, 3 months ago) by dannf
* Rebuild against kernel-tree-2.6.8-16sarge2
* Increment ABI to -3

Revision 5673 - Directory Listing
Modified Wed Feb 1 07:36:46 2006 UTC (7 years, 3 months ago) by dannf
* Use kernel-tree-2.6.8-16sarge2.
* Increment ABI to -3

Revision 5672 - Directory Listing
Modified Wed Feb 1 07:34:47 2006 UTC (7 years, 3 months ago) by dannf
* Build against kernel-tree-2.6.8-16sarge1
* Add an ABI string to the package name

Revision 5671 - Directory Listing
Modified Wed Feb 1 07:05:32 2006 UTC (7 years, 3 months ago) by dannf
prepare for sarge2 build

Revision 5670 - Directory Listing
Modified Wed Feb 1 07:04:33 2006 UTC (7 years, 3 months ago) by dannf
* Build against kernel-tree-2.6.8-16sarge2
* Increment ABI to -3

Revision 5669 - Directory Listing
Modified Wed Feb 1 07:03:35 2006 UTC (7 years, 3 months ago) by dannf
* Rebuild against kernel-tree-2.6.8-16sarge2
* Increment ABI to -3

Revision 5668 - Directory Listing
Modified Wed Feb 1 07:01:57 2006 UTC (7 years, 3 months ago) by dannf
* Rebuild against kernel-tree-2.6.8-16sarge2
* Increment ABI to -12

Revision 5667 - Directory Listing
Modified Wed Feb 1 06:56:37 2006 UTC (7 years, 3 months ago) by dannf
* Built against kernel-tree 2.6.8-16sarge2
* Increment ABI to -3

Revision 5664 - Directory Listing
Modified Wed Feb 1 05:48:13 2006 UTC (7 years, 3 months ago) by dannf
* sparc64-clock-settime.dpatch
  [SECURITY] Remove unnecessary sign-extension in compat_sys_clock_settime,
  fixing a DoS vulnerability on sparc systems.
  See CVE-2006-0482

Revision 5644 - Directory Listing
Modified Tue Jan 31 06:02:13 2006 UTC (7 years, 3 months ago) by dannf
* Non-maintainer upload by the Security Team
* Use kernel-tree-2.4.27-10sarge2
* Use kernel-patch-2.4.27-s390 (>= 2.4.27-2sarge1)

Revision 5643 - Directory Listing
Modified Tue Jan 31 05:58:10 2006 UTC (7 years, 3 months ago) by dannf
* Non-maintainer upload by the Security Team
* Use kernel-tree-2.4.27-10sarge2
* Regenerate linux-2.4.27-s390.diff to apply to updated source tree

Revision 5639 - Directory Listing
Modified Tue Jan 31 05:44:26 2006 UTC (7 years, 3 months ago) by dannf
Load kernel-patch-2.4.27-s390-2.4.27 into
dists/sarge-security/kernel-2.4/s390/kernel-patch-2.4.27-s390.

Revision 5634 - Directory Listing
Modified Mon Jan 30 06:15:38 2006 UTC (7 years, 3 months ago) by dannf
* [SECURITY] s390: Fix for local root exploit: Force user process back to
  home space mode in space switch event exception handler. See CAN-2004-0887.
  206_s390-sacf-fix.diff

Revision 5632 - Directory Listing
Modified Mon Jan 30 04:59:27 2006 UTC (7 years, 3 months ago) by dannf
* Fix unchecked user-memory accesses in ptrage_getregs() and ptrace_setregs.
  This is a dependency for the CAN-2005-1761 fix.
  204_arch-ia64-ptrace-getregs-putregs.diff
* [SECURITY] Fix to prevent users from using ptrace to set the pl field
  of the ar.rsc reginster to any value, leading to the ability to overwrite
  kernel memory.  See CAN-2005-1761.
  205_arch-ia64-ptrace-restore_sigcontext.diff

Revision 5486 - Directory Listing
Modified Tue Jan 17 03:51:03 2006 UTC (7 years, 4 months ago) by dannf
typo fix

Revision 5485 - Directory Listing
Modified Tue Jan 17 03:50:06 2006 UTC (7 years, 4 months ago) by dannf
* [SECURITY] Fix a race condition that allows local users to view the
  environment variables of another process.
  203_proc_pic_cmdline_race.diff

Revision 5482 - Directory Listing
Modified Tue Jan 17 02:56:39 2006 UTC (7 years, 4 months ago) by dannf
* Errata for 2.4.27-6
  [SECURITY] 111-smb-client-overflow-fix-[1,2].diff also fixes an information
  leak.  See CVE-2004-0949.

Revision 5475 - Directory Listing
Modified Mon Jan 16 23:02:36 2006 UTC (7 years, 4 months ago) by dannf
  [SECURITY] SDLA firmware upgrade should require CAP_SYS_RAWIO;
* [SECURITY] Fix a potential overflow in sysctl buffer termination code.
  202_sysctl-buffer-overflow.diff

Revision 5473 - Directory Listing
Modified Mon Jan 16 22:59:22 2006 UTC (7 years, 4 months ago) by dannf
* sysctl-buffer-overflow.dpatch:
  [SECURITY] Fix a potential overflow in sysctl buffer termination code.
  See CVE-2005-4618

Revision 5471 - Directory Listing
Modified Mon Jan 16 22:32:25 2006 UTC (7 years, 4 months ago) by dannf
  [SECURITY] fix buffer overflow (underflow, really) that opens multiple
* mqueue-double-increment.dpatch:
  [SECURITY] Fix double increment of mqueue_mnt->mnt_count in sys_mq_open.
  See CVE-2005-3356

Revision 5376 - Directory Listing
Modified Mon Jan 9 07:02:18 2006 UTC (7 years, 4 months ago) by dannf
annotate CVE-2006-0095

Revision 5370 - Directory Listing
Modified Mon Jan 9 01:11:25 2006 UTC (7 years, 4 months ago) by dannf
* io_edgeport_overflow.dpatch:
  [SECURITY] fix buffer overflow (underflow, really) that opens multiple 
  attack vectors.
  See CVE-2004-1017

Revision 5366 - Directory Listing
Modified Sun Jan 8 23:56:48 2006 UTC (7 years, 4 months ago) by dannf
* fs_coda_coverty.dpatch:
  [SECURITY] Add bounds checking to coda fs.
  See CVE-2005-0124

Revision 5364 - Directory Listing
Modified Sun Jan 8 22:45:30 2006 UTC (7 years, 4 months ago) by dannf
add second part of the fix

Revision 5361 - Directory Listing
Modified Sun Jan 8 22:09:48 2006 UTC (7 years, 4 months ago) by dannf
* async-urb-delivery-oops.dpatch:
  [SECURITY] Fix oops that can result from a process terminating before
  an issued URB request completes.
  See CVE-2005-3055

Revision 5358 - Directory Listing
Modified Sun Jan 8 21:13:38 2006 UTC (7 years, 4 months ago) by dannf
* [SECURITY] Use the thread group ID to check if it a self-attach.  Fixes
  a local DoS (crash).  See CVE-2005-3783
  199_ptrace-fix_self-attach_rule.diff

Revision 5357 - Directory Listing
Modified Sun Jan 8 21:02:01 2006 UTC (7 years, 4 months ago) by dannf
* ptrace-fix_self-attach_rule.dpatch:
  [SECURITY] Use the thread group ID to check if it a self-attach.  Fixes
  a local DoS (crash).
  See CVE-2005-3783

Revision 5307 - Directory Listing
Modified Fri Jan 6 06:00:51 2006 UTC (7 years, 4 months ago) by horms
Annotate CVE-2006-0096

Revision 5304 - Directory Listing
Modified Fri Jan 6 05:57:53 2006 UTC (7 years, 4 months ago) by horms
  * Errata for 2.4.27-8
    [SECURITY] SDLA firmware upgrade should require CAP_SYS_RAWIO;
    Local privelage escalation. See CVE-2006-0096
    This was incorrectly annotated in 2.4.27-8 as an overflow
    discovered using coverty, which is actually CVE-2004-2607
    129_net_sdla_coverty.diff, included in 2.4.27-8

Revision 5271 - Directory Listing
Modified Thu Jan 5 08:56:06 2006 UTC (7 years, 4 months ago) by dannf
typo: s/CVS/CVE/

Revision 5267 - Directory Listing
Modified Thu Jan 5 08:21:49 2006 UTC (7 years, 4 months ago) by horms
  * [SECURITY] Fix refcnt of struct ip6_flowlabel; Local DoS
    From 2.6.14
    See CVE-2005-3806
    net-ipv6-flowlabel-refcnt.dpatch
  
  * [SECURITY] Information leak in sdla
    From 2.6.6
    See CVE-2004-2607
    200_net_sdla_xfer_leak.diff

Revision 5266 - Directory Listing
Modified Thu Jan 5 08:15:01 2006 UTC (7 years, 4 months ago) by horms
Fix SECURITY annotation of CVE-2005-3784

Revision 5262 - Directory Listing
Modified Thu Jan 5 08:04:23 2006 UTC (7 years, 4 months ago) by horms
net-sdla-coverty.dpatch was inadvertantly empty

Revision 5258 - Directory Listing
Modified Thu Jan 5 07:38:33 2006 UTC (7 years, 4 months ago) by horms
  * net-sdla-coverty.dpatch
    [SECURITY] SDLA firmware upgrade should require CAP_SYS_RAWIO; Local DoS
    CVE-NOMATCH

Revision 5256 - Directory Listing
Modified Thu Jan 5 06:46:41 2006 UTC (7 years, 4 months ago) by horms
  * kernel-dont-reap-traced.dpatch
    [PATCH] Don't auto-reap traced children; Local DoS
    See CVE-2005-3784

Revision 5249 - Directory Listing
Modified Thu Jan 5 03:32:30 2006 UTC (7 years, 4 months ago) by horms
  * net-ipv6-flowlabel-refcnt.dpatch
    [SECURITY] Fix refcnt of struct ip6_flowlabel; Local DoS
    From 2.6.14
    See CVE-2005-3806

Revision 5246 - Directory Listing
Modified Thu Jan 5 03:16:38 2006 UTC (7 years, 4 months ago) by horms
Missing security annotation for CVS-2005-4605

Revision 5245 - Directory Listing
Modified Thu Jan 5 03:16:15 2006 UTC (7 years, 4 months ago) by horms
  * dm-crypt-zero-key.dpatch
    [SECURITY] drm-crypt: zero key berofe freeing it.
    Potential local information leak
    CVE-NOMATCH

Revision 5227 - Directory Listing
Modified Wed Jan 4 07:23:44 2006 UTC (7 years, 4 months ago) by horms
  * proc-legacy-loff-underflow.dpatch
    Fix underflow in legacy proc interface; Local information leak
    See CVS-2005-4605
    From 2.6.15

Revision 5223 - Directory Listing
Modified Wed Jan 4 06:56:36 2006 UTC (7 years, 4 months ago) by horms
  * mempolicy-undefined-nodes.dpatch
    [SECURITY] Make sure interleave masks have at least one node set;
    Local Dos
    See CVE-2005-3358
    From 2.6.15


Revision 5222 - Directory Listing
Modified Wed Jan 4 06:53:14 2006 UTC (7 years, 4 months ago) by dannf
* [SECURITY] Fix a potential local root exploit in the
  /proc/sys/net/ipv4/conf interface.  See CVE-2005-2709
  196_sysctl-unregistration-oops.diff
  ****CHANGES ABI****
  setkeys-needs-root-1.diff, setkeys-needs-root-2.
* 150_private_fragment_queues-1.diff, 150_private_fragment_queues-2.diff:
  Keep fragment queues private to each user. See CAN-2005-0449 and
  http://oss.sgi.com/archives/netdev/2005-01/msg01048.html

Revision 5219 - Directory Listing
Modified Wed Jan 4 06:41:26 2006 UTC (7 years, 4 months ago) by dannf
* sysctl-unregistration-oops.dpatch
  [SECURITY] Fix a potential local root exploit in the
  /proc/sys/net/ipv4/conf interface.  See CVE-2005-2709
  ****CHANGES ABI****
* ipv4-fragment-queues-2.1.dpatch, ipv4-fragment-queues-3.dpatch,
  ipv4-fragment-queues-4.dpatch:
  [SECURITY] Re-apply the -3 and -4 patches, which were dropped in 2.6.8-15
  to avoid an ABI change.  Unapply the -2.1 patch which is superseded by -3.
  See CVE-2005-0449
  ****CHANGES ABI****

Revision 5084 - Directory Listing
Modified Sun Dec 25 06:51:31 2005 UTC (7 years, 5 months ago) by dannf
* Turn off CONFIG_PREEMPT, and change the ABI number to reflect the
  change.  This disables a potential DoS attack vector (which is not
  reproducible in later 2.6 kernels).

Revision 5083 - Directory Listing
Modified Sun Dec 25 06:49:31 2005 UTC (7 years, 5 months ago) by dannf
Preparation for a sarge2 build

Revision 5058 - Directory Listing
Modified Tue Dec 20 02:45:15 2005 UTC (7 years, 5 months ago) by horms
Annotate CVE-2005-3858

Revision 5057 - Directory Listing
Modified Tue Dec 20 02:43:21 2005 UTC (7 years, 5 months ago) by horms
Annotate CVE-2005-3848

Revision 5055 - Directory Listing
Modified Tue Dec 20 02:37:51 2005 UTC (7 years, 5 months ago) by horms
patch -> diff

Revision 5054 - Directory Listing
Modified Tue Dec 20 02:33:51 2005 UTC (7 years, 5 months ago) by horms
Revamped changelog

Revision 5051 - Directory Listing
Modified Tue Dec 20 02:05:51 2005 UTC (7 years, 5 months ago) by horms
* [SECURITY] IPV4: Fix DST leak in icmp_push_reply(). Remote DoS.
  See CVE-2005-3848.
  188_fix-dst-leak-in-icmp_push_reply.diff
* [SECURITY] IPV6: Fix SKB leak in ip6_input_finish.  Remote DoS.
  See CVE-2005-3858.
  189_ipv6-skb-leak.diff

Revision 5043 - Directory Listing
Modified Mon Dec 19 10:13:19 2005 UTC (7 years, 5 months ago) by horms
 [SECURITY] VFS: local denial-of-service with file leases. See CVE-2005-3857

Revision 5041 - Directory Listing
Modified Mon Dec 19 09:52:51 2005 UTC (7 years, 5 months ago) by horms
[SECURITY] VFS: local denial-of-service with file leases. See CVE-2005-3857

Revision 4927 - Directory Listing
Modified Mon Nov 28 01:08:41 2005 UTC (7 years, 5 months ago) by dannf
add CVE reference

Revision 4874 - Directory Listing
Modified Wed Nov 23 21:01:00 2005 UTC (7 years, 6 months ago) by dannf
start a sarge-security branch at 2.6.8-12, which is what shipped in sarge

Revision 4873 - Directory Listing
Modified Wed Nov 23 20:57:16 2005 UTC (7 years, 6 months ago) by dannf
this was against the sid version of 2.6.8-powerpc; i'll copy the sarge tag in instead

Revision 4871 - Directory Listing
Modified Tue Nov 22 17:00:17 2005 UTC (7 years, 6 months ago) by dannf
correct target distribution

Revision 4852 - Directory Listing
Modified Sun Nov 20 08:08:02 2005 UTC (7 years, 6 months ago) by dannf
typo fix

Revision 4851 - Directory Listing
Modified Sun Nov 20 08:07:12 2005 UTC (7 years, 6 months ago) by dannf
* setkeys-needs-root-1.diff, setkeys-needs-root-2.diff:
  [SECURITY] Require root privilege to write the current
  function key string entry of other user's terminals.
  See CVE-2005-3257

Revision 4850 - Directory Listing
Modified Sun Nov 20 07:34:24 2005 UTC (7 years, 6 months ago) by dannf
* setkeys-needs-root-1.patch, setkeys-needs-root-2.patch:
  [SECURITY] Require root privilege to write the current
  function key string entry of other user's terminals.
  See CVE-2005-3257

Revision 4846 - Directory Listing
Modified Sun Nov 20 05:12:26 2005 UTC (7 years, 6 months ago) by dannf
disabling ABI-changing CVE-2005-2709 for now

Revision 4839 - Directory Listing
Modified Fri Nov 18 18:08:04 2005 UTC (7 years, 6 months ago) by dannf
* 196_sysctl-unregistration-oops.patch
  [SECURITY] Fix a potential local root exploit in the
  /proc/sys/net/ipv4/conf interface.  See CVE-2005-2709

Revision 4838 - Directory Listing
Modified Fri Nov 18 06:56:07 2005 UTC (7 years, 6 months ago) by dannf
add fix for CVE-2005-2709 to 2.6.8 sarge-security

Revision 4697 - Directory Listing
Modified Mon Oct 31 09:47:15 2005 UTC (7 years, 6 months ago) by horms
CAN-2005-3181 is not in 2.4 as AUDITSYSCALL doesn't exist

Revision 4680 - Directory Listing
Modified Fri Oct 28 09:23:59 2005 UTC (7 years, 6 months ago) by horms
CVE-2005-3181

Revision 4663 - Directory Listing
Modified Thu Oct 27 06:23:29 2005 UTC (7 years, 7 months ago) by horms
Ignore previous commit, I was reading 2.4.27-10sarge1 instead of 2.4.27-10sarge2

Revision 4662 - Directory Listing
Modified Thu Oct 27 06:22:27 2005 UTC (7 years, 7 months ago) by horms
Add missing patches to serires

Revision 4650 - Directory Listing
Modified Mon Oct 24 21:03:02 2005 UTC (7 years, 7 months ago) by dannf
incorporate net-ipv6-udp_v6_get_port-loop patch (aka CAN-2005-2973) into 2.4.27
and update status

Revision 4647 - Directory Listing
Modified Mon Oct 24 19:07:02 2005 UTC (7 years, 7 months ago) by dannf
fix CAN-2005-2973

Revision 4458 - Directory Listing
Modified Fri Oct 14 09:52:37 2005 UTC (7 years, 7 months ago) by horms
Backport was wrong

Revision 4451 - Directory Listing
Modified Fri Oct 14 07:29:26 2005 UTC (7 years, 7 months ago) by horms
[SECURITY] XFS: Handle inode creation race

Revision 4450 - Directory Listing
Modified Fri Oct 14 07:29:15 2005 UTC (7 years, 7 months ago) by horms
[SECURITY] XFS: Handle inode creation race

Revision 4442 - Directory Listing
Modified Thu Oct 13 12:34:15 2005 UTC (7 years, 7 months ago) by horms
Fixed annotations for CAN-2005-3110 CAN-2005-3109 CAN-2005-3107 CAN-2005-3106

Revision 4428 - Directory Listing
Modified Wed Oct 12 09:50:44 2005 UTC (7 years, 7 months ago) by horms
Annotate CAN-2005-3179 and CAN-2005-3180

Revision 4415 - Directory Listing
Modified Tue Oct 11 10:48:53 2005 UTC (7 years, 7 months ago) by horms
[SECURITY] Avoid 'names_cache' memory leak with CONFIG_AUDITSYSCALL

Revision 4411 - Directory Listing
Modified Tue Oct 11 10:46:44 2005 UTC (7 years, 7 months ago) by horms
[SECURITY] Avoid 'names_cache' memory leak with CONFIG_AUDITSYSCALL

Revision 4410 - Directory Listing
Modified Tue Oct 11 10:44:53 2005 UTC (7 years, 7 months ago) by horms
  * plug-names_cache-memleak.dpatch
    Avoid 'names_cache' memory leak with CONFIG_AUDITSYSCALL

Revision 4407 - Directory Listing
Modified Tue Oct 11 10:36:18 2005 UTC (7 years, 7 months ago) by horms
[SECURITY] orinoco: Information leakage due to incorrect padding

Revision 4405 - Directory Listing
Modified Tue Oct 11 10:28:05 2005 UTC (7 years, 7 months ago) by horms
  * orinoco-info-leak.patch
    [SECURITY] orinoco: Information leakage due to incorrect padding
    From 2.6.13.4

Revision 4349 - Directory Listing
Modified Fri Oct 7 10:15:23 2005 UTC (7 years, 7 months ago) by horms
Annotate CAN-2005-3053 CAN-2005-3044 CAN-2005-3105 CAN-2005-3106 CAN-2005-3107 CAN-2005-2553

Revision 4340 - Directory Listing
Modified Fri Oct 7 04:50:45 2005 UTC (7 years, 7 months ago) by horms
Annotate CAN-2005-3110 and CAN-2005-3108

Revision 4316 - Directory Listing
Modified Thu Oct 6 09:55:04 2005 UTC (7 years, 7 months ago) by horms
  * lost-fput-in-32bit-ioctl-on-x86-64.patch
    [SECURITY] lost fput in 32bit ioctl on x86-6; local DoS4
    From 2.6.13.2
  
  * lost-sockfd_put-in-32bit-compat-routing_ioctl.patch
    [SECURITY] lost sockfd_put() in routing_ioctl(); local DoS
    From 2.6.13.2


Revision 4307 - Directory Listing
Modified Wed Oct 5 14:34:10 2005 UTC (7 years, 7 months ago) by ths-guest
Mips/mipsel kernel for sarge-security.

Revision 4296 - Directory Listing
Modified Tue Sep 27 21:23:19 2005 UTC (7 years, 7 months ago) by dannf
s/Can/CAN/

Revision 4294 - Directory Listing
Modified Tue Sep 27 21:19:13 2005 UTC (7 years, 7 months ago) by dannf
* mempolicy-check-mode.dpatch
  [SECURITY] Input validation in sys_set_mempolicy(); local DoS.
  See Can-2005-3053

Revision 4292 - Directory Listing
Modified Tue Sep 27 13:53:19 2005 UTC (7 years, 7 months ago) by maks-guest
fix series s/diff/dpatch/
sarge branch fine.

Revision 4180 - Directory Listing
Modified Mon Sep 12 08:13:16 2005 UTC (7 years, 8 months ago) by horms
Fix CAN-2005-2872 annotation

Revision 4178 - Directory Listing
Modified Mon Sep 12 08:10:52 2005 UTC (7 years, 8 months ago) by horms
Fix CAN-2005-2872 annotation

Revision 4148 - Directory Listing
Modified Fri Sep 9 02:55:55 2005 UTC (7 years, 8 months ago) by horms
* Fix security annotations

  * fix-dst-leak-in-icmp_push_reply.dpatch
    [SECURITY] Fix DST leak in icmp_push_reply(). Possible remote DoS?
    From 2.6.12.6

  * nptl-signal-delivery-deadlock-fix.dpatch
    [SECURITY] NPTL signal delivery deadlock fix; Possible local DoS?
    Backported From 2.6.12.6

  * fix-memory-leak-in-sg.c-seq_file.dpatch
    [SECURITY] fix a memory leak in devices seq_file implementation;
    local DoS. From 2.6.12.6
    See CAN-2005-2800

  * ipv6-skb-leak.dpatch
    [SECURITY] Fix SKB leak in ip6_input_finish(); local DoS.
    From 2.6.12.6

Revision 4143 - Directory Listing
Modified Fri Sep 9 02:16:31 2005 UTC (7 years, 8 months ago) by horms
net-bridge-forwarding-poison-1.dpatch was not annotated correctly

Revision 4140 - Directory Listing
Modified Wed Sep 7 08:36:47 2005 UTC (7 years, 8 months ago) by horms
Annotate CAN-2005-2801 and CAN-2005-2802

Revision 4138 - Directory Listing
Modified Wed Sep 7 08:31:11 2005 UTC (7 years, 8 months ago) by horms
Annotate CAN-2005-2801 and CAN-2005-2802

Revision 4118 - Directory Listing
Modified Thu Sep 1 07:21:35 2005 UTC (7 years, 8 months ago) by horms
+  * zlib-revert-broken-change.dpatch
+    [Security] Revert huft_build() function fix
+    From 2.6.12.6
+    See CAN-2005-2459

Revision 4117 - Directory Listing
Modified Thu Sep 1 07:21:25 2005 UTC (7 years, 8 months ago) by horms
fix patch name

Revision 4116 - Directory Listing
Modified Thu Sep 1 07:18:29 2005 UTC (7 years, 8 months ago) by horms
fix patch name

Revision 4115 - Directory Listing
Modified Thu Sep 1 07:02:24 2005 UTC (7 years, 8 months ago) by horms
* 187_zisofs-2.diff
   [Security] Check input buffer size in zisofs
   From 2.6.12.5
   Omitted from the previous release, as I wasn't sure that it was a
   security bug. But now it has a CAN number, so its in.
   See CAN-2005-2457
 
* 186_zlib-revert-broken-change.dpatch
  [Security] Revert huft_build() function fix
  From 2.6.12.6
  See CAN-2005-2459


Revision 4092 - Directory Listing
Modified Wed Aug 31 10:17:37 2005 UTC (7 years, 8 months ago) by luther
Copied from: branches/dist/sarge-security revision 4091
Moved the sarge-security branch to the new layout.

Revision 4073 - Directory Listing
Modified Tue Aug 30 08:33:33 2005 UTC (7 years, 8 months ago) by horms
Original Path: branches/dist/sarge-security
  * zisofs.diff
    [Security] Check input buffer size in zisofs
    From 2.6.12.5
    Omitted from the previous release, as I wasn't sure that it
    was a security bug. But now it has a CAN number, so its in.
    See CAN-2005-2457

Revision 4067 - Directory Listing
Modified Tue Aug 30 08:19:26 2005 UTC (7 years, 8 months ago) by horms
Original Path: branches/dist/sarge-security
  * 183_zisofs.diff
    [Security] Check input buffer size in zisofs
    From 2.6.12.5
    Omitted from the previous release, as I wasn't sure that it was a
    security bug. But now it has a CAN number, so its in.
    See CAN-2005-2457

Revision 4058 - Directory Listing
Modified Fri Aug 26 17:15:28 2005 UTC (7 years, 9 months ago) by waldi
Original Path: branches/dist/sarge-security
/branches/dist/sarge-security/kernel-2.4/s390/kernel-image-2.4.27-s390,
/branches/dist/sarge-security/kernel-2.4/s390/kernel-patch-2.4.27-s390: Import.

Revision 4057 - Directory Listing
Modified Fri Aug 26 17:09:37 2005 UTC (7 years, 9 months ago) by waldi
Original Path: branches/dist/sarge-security
* debian/control: Update build-deps.
* debian/changelog: Prepare to release (2.6.8-5sarge1).

Revision 4056 - Directory Listing
Modified Fri Aug 26 17:02:47 2005 UTC (7 years, 9 months ago) by waldi
Original Path: branches/dist/sarge-security
/branches/dist/sarge-security/kernel-2.4/s390: Import.

Revision 4055 - Directory Listing
Modified Fri Aug 26 16:38:50 2005 UTC (7 years, 9 months ago) by waldi
Original Path: branches/dist/sarge-security
/branches/dist/sarge-security/s390: Copy.

Revision 4053 - Directory Listing
Modified Thu Aug 25 19:14:55 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
* Change build-dep from modutils to module-init-tools, preventing a FTBFS.

Revision 4043 - Directory Listing
Modified Tue Aug 23 21:56:15 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
add hppa to sarge-security branch

Revision 4023 - Directory Listing
Modified Mon Aug 22 14:21:21 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
add sparc to sarge-security/2.4

Revision 4022 - Directory Listing
Modified Mon Aug 22 08:04:22 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
unreleased

Revision 4019 - Directory Listing
Modified Mon Aug 22 06:52:11 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
+  * 185_net-sockglue-cap.diff
+     [Security] Restrict socket policy loading to CAP_NET_ADMIN.
+     See CAN-2005-2555.

Revision 4017 - Directory Listing
Modified Mon Aug 22 06:41:47 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
+  * net-sockglue-cap.dpatch
+    [Security] Restrict socket policy loading to CAP_NET_ADMIN.
+    See CAN-2005-2555.

Revision 3993 - Directory Listing
Modified Fri Aug 19 19:58:05 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
add kernel-image-2.6.8-sparc-2.6.8 to sarge-security

Revision 3978 - Directory Listing
Modified Thu Aug 18 20:46:32 2005 UTC (7 years, 9 months ago) by fschueler-guest
Original Path: branches/dist/sarge-security
prepared 2.6.8-16sarge1

Revision 3968 - Directory Listing
Modified Thu Aug 18 11:41:13 2005 UTC (7 years, 9 months ago) by fschueler-guest
Original Path: branches/dist/sarge-security
Add amd64/kernel-image-2.6.8-amd64-2.6.8 to sarage-security branch.

Revision 3963 - Directory Listing
Modified Wed Aug 17 16:06:19 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
add kernel-image-2.4.27-ia64-2.4.27 to sarge-security branch

Revision 3962 - Directory Listing
Modified Wed Aug 17 15:39:43 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
correct version string

Revision 3959 - Directory Listing
Modified Wed Aug 17 10:16:56 2005 UTC (7 years, 9 months ago) by nobse
Original Path: branches/dist/sarge-security
moved update for sarge to sarge-security

Revision 3958 - Directory Listing
Modified Wed Aug 17 08:57:48 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Move to correct location

Revision 3957 - Directory Listing
Modified Wed Aug 17 08:55:54 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Move to correct location

Revision 3952 - Directory Listing
Modified Wed Aug 17 08:27:24 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
sarge-security -> stable-security My bad

Revision 3951 - Directory Listing
Modified Wed Aug 17 08:24:54 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing kernel-patch-2.4.27-powerpc 2.4.27-10sarge1

Revision 3950 - Directory Listing
Modified Wed Aug 17 08:20:31 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
branch kernel-patch-powerpc-2.4.27 for sarge-security

Revision 3949 - Directory Listing
Modified Wed Aug 17 08:16:19 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing kernel-image-2.4.27-i386 2.4.27-10sarge1

Revision 3948 - Directory Listing
Modified Wed Aug 17 08:14:56 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Severity should be high for a security release

Revision 3947 - Directory Listing
Modified Wed Aug 17 08:10:58 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Branch kernel-image-2.4.27 for sarge-security

Revision 3946 - Directory Listing
Modified Wed Aug 17 07:26:28 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing 2.4.27-10sarge1

Revision 3945 - Directory Listing
Modified Wed Aug 17 07:25:25 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing 2.4.27-10sarge1

Revision 3944 - Directory Listing
Modified Wed Aug 17 07:24:12 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing 2.4.27-10sarge1

Revision 3943 - Directory Listing
Modified Wed Aug 17 07:19:41 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
re-branch changelog

Revision 3942 - Directory Listing
Modified Wed Aug 17 07:18:01 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
changelog seems busted

Revision 3940 - Directory Listing
Modified Wed Aug 17 07:08:47 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
branch 2.4 for sarge-security

Revision 3930 - Directory Listing
Modified Tue Aug 16 14:22:37 2005 UTC (7 years, 9 months ago) by dannf
Original Path: branches/dist/sarge-security
add kernel-image-2.6.8-ia64-2.6.8 to sarge-security branch

Revision 3929 - Directory Listing
Modified Tue Aug 16 12:00:26 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
fix dist

Revision 3928 - Directory Listing
Modified Tue Aug 16 11:47:40 2005 UTC (7 years, 9 months ago) by nobse
Original Path: branches/dist/sarge-security
built against kernel-tree 2.6.8-16sarge1

Revision 3927 - Directory Listing
Modified Tue Aug 16 11:32:20 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing kernel-patch-powerpc-2.6.8 2.6.8-16sarge1

Revision 3926 - Directory Listing
Modified Tue Aug 16 11:29:31 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Added kernel-patch-powerpc-2.6.8-2.6.8 to sarge-security

Revision 3925 - Directory Listing
Modified Tue Aug 16 11:27:36 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Preparing kernel-image-2.6.8-i386 2.6.8-16sarge1

Revision 3924 - Directory Listing
Modified Tue Aug 16 11:26:13 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Remove non-security fixes

Revision 3922 - Directory Listing
Modified Tue Aug 16 11:17:43 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
preparing kernel-source-2.6.8 2.6.8-16sarge1

Revision 3920 - Directory Listing
Modified Tue Aug 16 11:14:39 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Add sarge-security branches for 2.6.8 source and i386

Revision 3919 - Directory Listing
Added Tue Aug 16 11:11:38 2005 UTC (7 years, 9 months ago) by horms
Original Path: branches/dist/sarge-security
Add a place for sarge-security

  ViewVC Help
Powered by ViewVC 1.1.5