[kernel] r22218 - dists/squeeze-security/linux-2.6/debian/patches/series

[Holger Levsen]

Author: holger
Date: Sat Dec 20 19:18:10 2014
New Revision: 22218

Log:
fixup previous commit, patches need to be applied before they can be removed...

Modified:
   dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze10
   dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze9

Modified: dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze10
==============================================================================
--- dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze10	Sat Dec 20 18:35:34 2014	(r22217)
+++ dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze10	Sat Dec 20 19:18:10 2014	(r22218)
@@ -1 +1,30 @@
+# Drop patches included in 2.6.32.61..2.6.32.64
+- bugfix/all/md-raid6-Fix-misapplied-backport-in-2.6.32.64.patch
+- bugfix/all/sctp-Fix-double-free-introduced-by-bad-backport-in-2.patch
+- bugfix/all/net-sendmsg-Really-fix-NULL-pointer-dereference.patch
+- bugfix/all/vlan-Don-t-propagate-flag-changes-on-down-interfaces.patch
+- bugfix/all/proc-connector-Delete-spurious-memset-in-proc_exit_c.patch
+- bugfix/all/block-Fix-blk_execute_rq_nowait-dead-queue-handling.patch
+- bugfix/all/block-add-missing-blk_queue_dead-checks.patch
+- bugfix/x86/x86_64-traps-Rework-bad_iret.patch End of patches to drop for 2.6.32.64
+- bugfix/x86/x86_64-traps-Fix-the-espfix64-DF-fixup-and-rewrite-i.patch
+- bugfix/x86/x86_64-traps-Stop-using-IST-for-SS.patch
+- bugfix/x86/x86-espfix-xen-Fix-allocation-of-pages-for-paravirt-.patch
+- bugfix/x86/x86_64-entry-xen-Do-not-invoke-espfix64-on-Xen.patch
+- bugfix/x86/x86-espfix-Make-it-possible-to-disable-16-bit-suppor.patch
+- bugfix/x86/x86-espfix-Make-espfix64-a-Kconfig-option-fix-UML.patch
+- bugfix/x86/x86-espfix-Fix-broken-header-guard.patch
+- bugfix/x86/x86-espfix-Move-espfix-definitions-into-a-separate-h.patch
+- bugfix/x86/x86-64-espfix-Don-t-leak-bits-31-16-of-esp-returning.patch
+- bugfix/x86/x86-32-espfix-Remove-filter-for-espfix32-due-to-race.patch
+- bugfix/x86/x86-64-modify_ldt-Ban-16-bit-segments-on-64-bit-kern.patch
+- bugfix/x86/x86-64-Adjust-frame-type-at-paranoid_exit.patch
+- bugfix/x86/x86-64-bit-Move-K8-B-step-iret-fixup-to-fault-entry-.patch
+- bugfix/all/CVE-2014-4943.patch
+- bugfix/all/CVE-2014-4654+4655.patch  
+- bugfix/all/CVE-2014-4653.patch
+# End of patches to drop for 2.6.32.65
+
+# Add upstream patches
 + bugfix/all/stable/2.6.32.65.patch
+

Modified: dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze9
==============================================================================
--- dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze9	Sat Dec 20 18:35:34 2014	(r22217)
+++ dists/squeeze-security/linux-2.6/debian/patches/series/48squeeze9	Sat Dec 20 19:18:10 2014	(r22218)
@@ -134,31 +134,6 @@
 - debian/alsa-avoid-abi-change-for-cve-2014-4652-fix.patch
 - bugfix/all/CVE-2014-4652.patch
 # End of patches to drop for 2.6.32.64
-- bugfix/all/CVE-2014-4653.patch
-- bugfix/all/CVE-2014-4654+4655.patch  
-- bugfix/all/CVE-2014-4943.patch
-- bugfix/x86/x86-64-bit-Move-K8-B-step-iret-fixup-to-fault-entry-.patch
-- bugfix/x86/x86-64-Adjust-frame-type-at-paranoid_exit.patch
-- bugfix/x86/x86-64-modify_ldt-Ban-16-bit-segments-on-64-bit-kern.patch
-- bugfix/x86/x86-32-espfix-Remove-filter-for-espfix32-due-to-race.patch
-- bugfix/x86/x86-64-espfix-Don-t-leak-bits-31-16-of-esp-returning.patch
-- bugfix/x86/x86-espfix-Move-espfix-definitions-into-a-separate-h.patch
-- bugfix/x86/x86-espfix-Fix-broken-header-guard.patch
-- bugfix/x86/x86-espfix-Make-espfix64-a-Kconfig-option-fix-UML.patch
-- bugfix/x86/x86-espfix-Make-it-possible-to-disable-16-bit-suppor.patch
-- bugfix/x86/x86_64-entry-xen-Do-not-invoke-espfix64-on-Xen.patch
-- bugfix/x86/x86-espfix-xen-Fix-allocation-of-pages-for-paravirt-.patch
-- bugfix/x86/x86_64-traps-Stop-using-IST-for-SS.patch
-- bugfix/x86/x86_64-traps-Fix-the-espfix64-DF-fixup-and-rewrite-i.patch
-- bugfix/x86/x86_64-traps-Rework-bad_iret.patch End of patches to drop for 2.6.32.64
-- bugfix/all/block-add-missing-blk_queue_dead-checks.patch
-- bugfix/all/block-Fix-blk_execute_rq_nowait-dead-queue-handling.patch
-- bugfix/all/proc-connector-Delete-spurious-memset-in-proc_exit_c.patch
-- bugfix/all/vlan-Don-t-propagate-flag-changes-on-down-interfaces.patch
-- bugfix/all/net-sendmsg-Really-fix-NULL-pointer-dereference.patch
-- bugfix/all/sctp-Fix-double-free-introduced-by-bad-backport-in-2.patch
-- bugfix/all/md-raid6-Fix-misapplied-backport-in-2.6.32.64.patch
-# End of patches to drop for 2.6.32.65
 
 # Add upstream patches
 + bugfix/all/stable/2.6.32.61.patch
@@ -171,6 +146,34 @@
 + debian/alsa-avoid-abi-change-for-cve-2014-4652-fix.patch
 + bugfix/all/ipv6-fix-NULL-dereference-in-udp6_ufo_fragment.patch
 
-# Fix-ups for 2.6.32.61..64
+# Add security patches not yet available in upstream kernel
++ bugfix/all/CVE-2014-4653.patch
++ bugfix/all/CVE-2014-4654+4655.patch  
++ bugfix/all/CVE-2014-4943.patch
+
 + debian/block-Avoid-ABI-change-in-2.6.32.61.patch
 
+# Fix-ups for 2.6.32.61..64
++ bugfix/all/block-add-missing-blk_queue_dead-checks.patch
++ bugfix/all/block-Fix-blk_execute_rq_nowait-dead-queue-handling.patch
++ bugfix/all/proc-connector-Delete-spurious-memset-in-proc_exit_c.patch
++ bugfix/all/vlan-Don-t-propagate-flag-changes-on-down-interfaces.patch
++ bugfix/all/net-sendmsg-Really-fix-NULL-pointer-dereference.patch
++ bugfix/all/sctp-Fix-double-free-introduced-by-bad-backport-in-2.patch
++ bugfix/all/md-raid6-Fix-misapplied-backport-in-2.6.32.64.patch
+
+# Fixes for kernel entry/exit security flaws (mostly x86-64)
++ bugfix/x86/x86-64-bit-Move-K8-B-step-iret-fixup-to-fault-entry-.patch
++ bugfix/x86/x86-64-Adjust-frame-type-at-paranoid_exit.patch
++ bugfix/x86/x86-64-modify_ldt-Ban-16-bit-segments-on-64-bit-kern.patch
++ bugfix/x86/x86-32-espfix-Remove-filter-for-espfix32-due-to-race.patch
++ bugfix/x86/x86-64-espfix-Don-t-leak-bits-31-16-of-esp-returning.patch
++ bugfix/x86/x86-espfix-Move-espfix-definitions-into-a-separate-h.patch
++ bugfix/x86/x86-espfix-Fix-broken-header-guard.patch
++ bugfix/x86/x86-espfix-Make-espfix64-a-Kconfig-option-fix-UML.patch
++ bugfix/x86/x86-espfix-Make-it-possible-to-disable-16-bit-suppor.patch
++ bugfix/x86/x86_64-entry-xen-Do-not-invoke-espfix64-on-Xen.patch
++ bugfix/x86/x86-espfix-xen-Fix-allocation-of-pages-for-paravirt-.patch
++ bugfix/x86/x86_64-traps-Stop-using-IST-for-SS.patch
++ bugfix/x86/x86_64-traps-Fix-the-espfix64-DF-fixup-and-rewrite-i.patch
++ bugfix/x86/x86_64-traps-Rework-bad_iret.patch