-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 09 Jan 2012 21:17:41 +0100
Source: user-mode-linux
Binary: user-mode-linux
Architecture: i386
Version: 2.6.32-1um-4+39squeeze1
Distribution: squeeze-security
Urgency: high
Maintainer: i386 Build Daemon (murphy) <buildd_i386-murphy@buildd.debian.org>
Changed-By: dann frazier <dannf@debian.org>
Description: 
 user-mode-linux - User-mode Linux (kernel)
Closes: 630730 643817 644604 646132
Changes: 
 user-mode-linux (2.6.32-1um-4+39squeeze1) stable-security; urgency=high
 .
   * Rebuild against linux-source-2.6.32 (2.6.32-39squeeze1):
     * Revert "ipv6: make fragment identifications less predictable"
       (Closes: #643817).  This reopens CVE-2011-2699.
     * xen: Revert "xen: Use IRQF_FORCE_RESUME". Fixes live migration regression
       in 2.6.32.42. (Closes: #644604)
     * Really fix bugs in IPv6 forwarding with GRO/GSO (Closes: #630730):
       - e1000e,igb,igbvf,ixgbe: Fix IPv6 GSO type checks
       - ipv6: Add GSO support on forwarding path
     * [powerpc] vserver: Wire up syscall (Closes: #646132)
     * Restrict ioctl forwarding on partitions and logical volumes
       (CVE-2011-4127)
     * xfs: Fix possible memory corruption in xfs_readlink (CVE-2011-4077)
     * KEYS: Fix a NULL pointer deref in the user-defined key type
       (CVE-2011-4110)
     * [x86] KVM: Prevent starting PIT timers in the absence of irqchip support
       (CVE-2011-4622)
     * rose: Add length checks to CALL_REQUEST parsing (CVE-2011-4914)
Checksums-Sha1: 
 3a9fee3fc3a06e9ed978831ea646e3758425ded7 6516456 user-mode-linux_2.6.32-1um-4+39squeeze1_i386.deb
Checksums-Sha256: 
 d1628cc6f68d431e3d4c2749991026adffd007f7e4e98f2c4f85906ddaca068a 6516456 user-mode-linux_2.6.32-1um-4+39squeeze1_i386.deb
Files: 
 952829446bdafcdc13ce2e84dda22fd9 6516456 kernel extra user-mode-linux_2.6.32-1um-4+39squeeze1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=5vci
-----END PGP SIGNATURE-----