Summary about Linux Kernel Packages in woody

Due to my work as part of the Security Team I have to investigate kernel packages as well. When we are informed about a vulnerability in the Linux kernel we need to check which version is vulnerable and prepare updates.

For this, we need to fix all relevant source archives. Then we need to contact the port maintainers, provide them fixed source archives or patches, and ask them to prepare updated kernel packages.

Even though this does sound easy, it is not, due to the sheer amount of different kernel versions and kernel source packages. In woody we have 8 different kernel versions, 2 different major versions, and 11 source archives, together with nearly uncountable binary packages.

The table below is intended to help me keep track of kernel vulnerabilities in the woody distribution.

Source Archives


KV kernel-source 2.2.10
KV kernel-source 2.2.19
KV kernel-source 2.2.20
KV kernel-source 2.2.22
KV kernel-source 2.4.16
KV kernel-source 2.4.17
KV kernel-source 2.4.18
KV kernel-source 2.4.19

Alpha Architecture


KV kernel-image 2.2.22
   Maintainer: Herbert Xu <herbert@debian.org>
   Source: kernel-image-2.2.22-alpha
   Depends: kernel-source-2.2.22
KV kernel-image 2.4.18
   Maintainer: Herbert Xu <herbert@debian.org>
   Source: kernel-image-2.4.18-alpha
   Depends: kernel-source-2.4.18

ARM Architecture


KV kernel-image 2.2.19
   Maintainer: Philip Blundell <pb@nexus.co.uk>
   Source: kernel-image-2.2.19-netwinder
   Source: kernel-image-2.2.19-riscpc
   Depends: kernel-source-2.2.19
KV kernel-image 2.4.16
   Maintainer: Philip Blundell <pb@nexus.co.uk>
   Source: kernel-image-2.4.16-lart
   Source: kernel-image-2.4.16-netwinder
   Source: kernel-image-2.4.16-riscpc
   Source: kernel-patch-2.4.16-arm
   Depends: kernel-source-2.4.16

HP Precision Architecture


KV kernel-image 2.4.17
   Maintainer: LaMont Jones <lamont@debian.org>
   Source: kernel-image-2.4.17-hppa
   Note: full source included
KV kernel-image 2.4.18
   Maintainer: LaMont Jones <lamont@debian.org>
   Source: kernel-image-2.4.18-hppa
   Note: full source included

Intel IA-32 Architecture


KV kernel-image 2.2.22
   Maintainer: John Robinson <jaqque@debian.org>
   Source: kernel-image-2.2.20-i386
   Source: kernel-image-2.2.20-reiserfs-i386
   Depends: kernel-source-2.2.22
KV kernel-image 2.4.18
   Maintainer: Herbert Xu <herbert@debian.org>
   Source: kernel-image-2.4.18-i386
   Source: kernel-image-2.4.18-i386bf
   Depends: kernel-source-2.4.18

Intel IA-64 Architecture


KV kernel-image 2.4.17
   Maintainer: Dann Frazier <dannf@debian.org>
   Source: kernel-image-2.4.17-ia64
   Note: full source included

Motorola 680x0 Architecture


KV kernel-image 2.2.20
   Maintainer: Christian Steigies <cts@debian.org>
   Source: kernel-image-2.2.20-amiga
   Source: kernel-image-2.2.20-atari
   Source: kernel-image-2.2.20-bvme6000
   Source: kernel-image-2.2.20-mac
   Source: kernel-image-2.2.20-mvme147
   Source: kernel-image-2.2.20-mvme16x
   Depends: kernel-source-2.2.20

Big-endian MIPS Architecture


KV kernel-image 2.4.17
   Maintainer: Guido Guenther <agx@debian.org>
   Source: kernel-patch-2.4.17-mips
   Depends: kernel-source-2.4.17
KV kernel-image 2.4.19
   Maintainer: Guido Guenther <agx@debian.org>
   Source: kernel-patch-2.4.19-mips
   Depends: kernel-source-2.4.19

Little-endian MIPS Architecture


KV kernel-image 2.4.17
   Maintainer: Karsten Merker <merker@debian.org>
   Source: kernel-patch-2.4.17-mips
   Depends: kernel-source-2.4.17

PowerPC Architecture


KV kernel-image 2.2.10
   Maintainer: Sven Luther <luther@debian.org>
   Source: kernel-image-2.2.10-powerpc-apus
   Depends: kernel-source-2.2.10
KV kernel-image 2.2.20
   Maintainer: Sven Luther <luther@debian.org>
   Source: kernel-image-2.2.20-powerpc
   Depends: kernel-source-2.2.20
KV kernel-image 2.4.17
   Maintainer: Sven Luther <luther@debian.org>
   Source: kernel-patch-2.4.17-apus
   Depends: kernel-source-2.4.17
KV kernel-image 2.4.18
   Maintainer: Sven Luther <luther@debian.org>
   Source: kernel-patch-2.4.18-powerpc
   Depends: kernel-source-2.4.18

IBM S/390 Architecture


KV kernel-image 2.4.17
   Maintainer: Arnd Bergmann <arnd@debian.org>
   Source: kernel-image-2.4.17-s390
   Source: kernel-patch-2.4.17-s390
   Depends: kernel-source-2.4.17

Sun Sparc Architecture


KV kernel-image 2.2.20
   Maintainer: Ben Collins <bcollins@debian.org>
   Source: kernel-image-sparc-2.2
   Depends: kernel-source-2.2
   Note: kernel-source-2.2 provided by kernel-source-2.2.22, no interest in updates
KV kernel-image 2.4.18
   Maintainer: Ben Collins <bcollins@debian.org>
   Source: kernel-image-sparc-2.4
   Depends: kernel-source-2.4
   Note: no kernel-source-2.4 available, should have been superseded by 2.4.19
KV kernel-image 2.4.19
   Maintainer: Ben Collins <bcollins@debian.org>
   Source: kernel-image-sparc-2.4
   Depends: kernel-source-2.4
   Note: kernel-source-2.4 provided by kernel-source-2.4.19, no interest in updates