[linux] 01/02: Merge tag 'debian/3.16.7-ckt11-1+deb8u5' into jessie

debian-kernel at lists.debian.org debian-kernel at lists.debian.org
Thu Oct 15 17:51:48 UTC 2015


This is an automated email from the git hooks/post-receive script.

benh pushed a commit to branch jessie
in repository linux.

commit b0c0dae1e2722c13c88c5d5d5cadb1b206a28454
Merge: cdbfd56 1f71623
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Wed Oct 14 19:58:20 2015 +0100

    Merge tag 'debian/3.16.7-ckt11-1+deb8u5' into jessie

 debian/changelog                                   |  13 ++
 ...sg-shm-IPC-objects-before-doing-ipc_addid.patch | 108 ++++++++++
 ...ully-initialize-sem_array-before-making-i.patch |  60 ++++++
 ...fix-race-on-protocol-netns-initialization.patch | 227 +++++++++++++++++++++
 ...iteheat-fix-potential-null-deref-at-probe.patch |  79 +++++++
 debian/patches/series                              |   4 +
 6 files changed, 491 insertions(+)

diff --cc debian/changelog
index 6f921ca,4dfebdb..56aa1a8
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,396 -1,16 +1,409 @@@
 +linux (3.16.7-ckt17-2) UNRELEASED; urgency=medium
 +
 +  [ Aurelien Jarno ]
 +  * [mips*/octeon] Enable CAVIUM_CN63XXP1 (Closes: #800595)
 +
 +  [ Ben Hutchings ]
 +  * nbd: Restore request timeout detection (Closes: #770479)
 +
 + -- Aurelien Jarno <aurel32 at debian.org>  Sat, 03 Oct 2015 22:32:19 +0200
 +
 +linux (3.16.7-ckt17-1) jessie; urgency=medium
 +
 +  * New upstream stable updates:
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt12
 +    - [x86] reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag
 +    - UBI: fix soft lockup in ubi_check_volume()
 +    - mnt: Fail collect_mounts when applied to unmounted mounts
 +    - btrfs: unlock i_mutex after attempting to delete subvolume during send
 +      (regression in 3.16)
 +    - [arm64] dma-mapping: always clear allocated buffers
 +    - ALSA: emu10k1: Fix card shortname string buffer overflow
 +    - SCSI: add 1024 max sectors black list flag
 +    - 3w-sas,3w-xxxx,3w-9xxx: fix command completion race
 +    - [armhf] usb: chipidea: otg: remove mutex unlock and lock while stop and
 +      start role (regression in 3.16)
 +    - cdc-acm: prevent infinite loop when parsing CDC headers.
 +      (regression in 3.16.7-ckt8)
 +    - ALSA: emux: Fix mutex deadlock in OSS emulation
 +    - rbd: end I/O the entire obj_request on error
 +    - mlx4_en: Use correct loop cursor in error path.
 +    - [armhf,arm64] KVM: Fix and refactor unmap_range
 +    - [armhf] KVM: Unmap IPA on memslot delete/move
 +    - [armhf] KVM: user_mem_abort: support stage 2 MMIO page mapping
 +    - [armhf,arm64] KVM: avoid returning negative error code as bool
 +    - [armhf,arm64] KVM: fix use of WnR bit in kvm_is_write_fault()
 +    - [armhf] KVM: vgic: plug irq injection race
 +    - [armhf,arm64] KVM: Fix set_clear_sgi_pend_reg offset
 +    - [armhf,arm64] KVM: Fix VTTBR_BADDR_MASK and pgd alloc
 +    - [armhf,arm64] KVM: fix potential NULL dereference in user_mem_abort()
 +    - [armhf,arm64] KVM: Ensure memslots are within KVM_PHYS_SIZE
 +    - [arm64] KVM: fix unmapping with 48-bit VAs
 +    - [armhf,arm64] kvm: drop inappropriate use of kvm_is_mmio_pfn()
 +    - [armhf,arm64] KVM: Reset the HCR on each vcpu when resetting the vcpu
 +    - [armhf,arm64] KVM: Introduce stage2_unmap_vm
 +    - [armhf,arm64] KVM: Don't allow creating VCPUs after vgic_initialized
 +    - [armhf,arm64 KVM: Require in-kernel vgic for the arch timers
 +    - [arm64] KVM: Fix TLB invalidation by IPA/VMID
 +    - [arm64] KVM: Fix HCR setting for 32bit guests
 +    - [arm64] KVM: Do not use pgd_index to index stage-2 pgd
 +    - net: make skb_gso_segment error handling more robust
 +    - blk-mq: fix CPU hotplug handling
 +    - mm/memory-failure: call shake_page() when error hits thp tail page
 +    - nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
 +    - ocfs2: dlm: fix race between purge and get lock resource
 +    - drm/radeon: make VCE handle check more strict
 +    - drm/radeon: make UVD handle checking more strict
 +    - drm/radeon: more strictly validate the UVD codec
 +    - mnt: Fix fs_fully_visible to verify the root directory is visible
 +    - pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
 +    - crush: ensuring at most num-rep osds are selected
 +    - netfilter: nf_tables: fix error handling of rule replacement
 +    - netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
 +    - netfilter: nf_tables: check for overflow of rule dlen field
 +    - netfilter: nft_rbtree: fix locking
 +    - sched/autogroup: Fix failure to set cpu.rt_runtime_us
 +    - xprtrdma: Free the pd if ib_query_qp() fails
 +    - xfs: ensure truncate forces zeroed blocks to disk
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt13
 +    - usb: gadget: configfs: Fix interfaces array NULL-termination
 +    - nfsd: fix the check for confirmed openowner in nfs4_preprocess_stateid_op
 +    - libata: Blacklist queued TRIM on all Samsung 800-series (Closes: #790520)
 +    - md/raid5: don't record new size if resize_stripes fails.
 +    - sched: Handle priority boosted tasks proper in setscheduler()
 +    - [armel,armhf] net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K
 +      intruction.
 +    - drm/radeon: add new bonaire pci id (Closes: #792099)
 +    - firmware: dmi_scan: Fix ordering of product_uuid
 +    - ext4: fix NULL pointer dereference when journal restart fails
 +      (regression in 3.11)
 +    - ext4: check for zero length extent explicitly (regression in 3.13)
 +    - jbd2: fix r_count overflows leading to buffer overflow in journal recovery
 +    - igb: Fix oops on changing number of rings
 +    - igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector
 +    - [arm64] add missing PAGE_ALIGN() to __dma_free()
 +    - net: socket: Fix the wrong returns for recvmsg and sendmsg
 +      (regression in 3.16.7-ckt9)
 +    - mac80211: move WEP tailroom size check
 +    - [x86] KVM: MMU: fix smap permission check
 +    - [x86] KVM: MMU: fix CR4.SMEP=1, CR0.WP=0 with shadow pages
 +    - [x86] KVM: MMU: fix SMAP virtualization
 +    - sd: Disable support for 256 byte/sector disks
 +    - xen/events: don't bind non-percpu VIRQs with percpu chip
 +    - libceph: request a new osdmap if lingering request maps to no osd
 +    - [s390x] crypto: ghash - Fix incorrect ghash icv buffer handling.
 +    - ipvs: fix memory leak in ip_vs_ctl.c
 +    - ipv6: fix ECMP route replacement
 +    - ipv4: Avoid crashing in ip_error
 +    - bridge: fix parsing of MLDv2 reports
 +    - module: Call module notifier on failure after complete_formation()
 +      (regression in 3.16)
 +    - [x86] gpio: gpio-kempld: Fix get_direction return value
 +      (regression in 3.12)
 +    - [armel,armhf] 8356/1: mm: handle non-pmd-aligned end of RAM
 +    - mac80211: don't use napi_gro_receive() outside NAPI context
 +    - xfs: xfs_attr_inactive leaves inconsistent attr fork state behind
 +    - fs, omfs: add NULL terminator in the end up the token list
 +    - vfs: d_walk() might skip too much (regression in 3.16.7-ckt4)
 +    - target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST
 +    - net_sched: invoke ->attach() after setting dev->qdisc
 +    - fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings
 +      (regression in 3.16.7-ckt11)
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt14
 +    - n_tty: Fix auditing support for cannonical mode (regression in 3.12)
 +    - lib: Fix strnlen_user() to not touch memory after specified maximum
 +    - xfrm: fix a race in xfrm_state_lookup_byspi
 +    - thermal: step_wise: Revert optimization (regression in 3.12)
 +    - net: dp83640: fix broken calibration routine.
 +    - net: dp83640: reinforce locking rules.
 +    - unix/caif: sk_socket can disappear when state is unlocked
 +    - xen/netback: Properly initialize credit_bytes (regression in 3.16)
 +    - ipv4/udp: Verify multicast group is ours in upd_v4_early_demux()
 +      (regression in 3.13)
 +    - bridge: disable softirqs around br_fdb_update to avoid lockup
 +    - Btrfs: send, add missing check for dead clone root
 +    - Btrfs: send, don't leave without decrementing clone root's send_progress
 +    - btrfs: incorrect handling for fiemap_fill_next_extent return
 +    - btrfs: cleanup orphans while looking up default subvolume
 +    - [x86] iommu/vt-d: Allow RMRR on graphics devices too
 +      (regression in 3.16.3)
 +    - [armhf] irqchip: sunxi-nmi: Fix off-by-one error in irq iterator
 +    - mm/memory_hotplug.c: set zone->wait_table to null after freeing it
 +    - block: fix ext_dev_lock lockdep report (regression in 3.16.4)
 +    - iser-target: Fix variable-length response error completion
 +      (regression in 3.16)
 +    - iser-target: release stale iser connections
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt15
 +    - [x86] KVM: nSVM: Check for NRIPS support before updating control field
 +    - nfs: take extra reference to fl->fl_file when running a setlk
 +    - net: don't wait for order-3 page allocation
 +    - bridge: fix br_stp_set_bridge_priority race conditions
 +    - packet: read num_members once in packet_rcv_fanout()
 +    - packet: avoid out of bounds read in round robin fanout
 +    - neigh: do not modify unlinked entries
 +    - tcp: Do not call tcp_fastopen_reset_cipher from interrupt context
 +      (regression in 3.13)
 +    - sctp: Fix race between OOTB responce and route removal
 +    - media: s5h1420: fix a buffer overflow when checking userspace params
 +    - media: cx24116: fix a buffer overflow when checking userspace params
 +    - media: af9013: Don't accept invalid bandwidth
 +    - media: cx24117: fix a buffer overflow when checking userspace params
 +    - spi: fix race freeing dummy_tx/rx before it is unmapped
 +    - mtd: fix: avoid race condition when accessing mtd->usecount
 +    - intel_pstate: set BYT MSR with wrmsrl_on_cpu() (regression in 3.14)
 +    - leds / PM: fix hibernation on arm when gpio-led used with CPU led trigger
 +      (regression in 3.11)
 +    - mnt: Refactor the logic for mounting sysfs and proc in a user namespace
 +    - scsi_transport_srp: Fix a race condition
 +    - w1_therm reference count family data
 +    - drm/radeon: take the mode_config mutex when dealing with hpds (v2)
 +    - [armhf] usb: dwc3: gadget: return error if command sent to DGCMD register
 +      fails
 +    - rcu: Correctly handle non-empty Tiny RCU callback list with none ready
 +    - [armhf] usb: dwc3: gadget: don't clear EP_BUSY too early
 +    - staging: rtl8712: prevent buffer overrun in recvbuf2recvframe
 +    - SUNRPC: Fix a memory leak in the backchannel code
 +    - ieee802154: Fix sockaddr_ieee802154 implicit padding information leak.
 +    - mnt: Modify fs_fully_visible to deal with locked ro nodev and atime
 +    - regulator: core: fix constraints output buffer
 +    - ACPI / PM: Add missing pm_generic_complete() invocation
 +      (regression in 3.16)
 +    - [armel,armh] dmaengine: mv_xor: bug fix for racing condition in
 +      descriptors cleanup
 +    - [arm64] Do not attempt to use init_mm in reset_context()
 +    - ext4: fix race between truncate and __ext4_journalled_writepage()
 +    - [x86] pcmcia: Disable write buffering on Toshiba ToPIC95
 +    - fs/ufs: revert "ufs: fix deadlocks introduced by sb mutex merge"
 +      (regression in 3.16.4)
 +    - jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail()
 +    - jbd2: fix ocfs2 corrupt when updating journal superblock fails
 +    - fs/ufs: restore s_lock mutex (regression in 3.16)
 +    - regmap: Fix possible shift overflow in regmap_field_init()
 +    - [x86] PCI: Use host bridge _CRS info on systems with >32 bit addressing
 +      (regression in 3.14)
 +    - libata: Do not blacklist Micron M500DC (regression in 3.14)
 +    - [x86] iommu/amd: Handle large pages correctly in free_pagetable
 +      (regression in 3.11)
 +    - ext4: call sync_blockdev() before invalidate_bdev() in put_super()
 +    - xfs: fix remote symlinks on V5/CRC filesystems
 +    - ext4: don't retry file block mapping on bigalloc fs with non-extent file
 +    - xfs: don't truncate attribute extents if no extents exist
 +    - NET: ROSE: Don't dereference NULL neighbour pointer.
 +    - netfilter: nf_qeueue: Drop queue entries on nf_unregister_hook
 +    - fs: Fix S_NOSEC handling
 +    - stmmac: troubleshoot unexpected bits in des0 & des1
 +    - PM / sleep: Increase default DPM watchdog timeout to 60
 +      (regression in 3.13)
 +    - [armhf] clocksource: exynos_mct: Avoid blocking calls in the cpu hotplug
 +      notifier (regression in 3.11)
 +    - drm/radeon: compute ring fix hibernation (CI GPU family) v2.
 +    - drm/radeon: SDMA fix hibernation (CI GPU family).
 +    - [armhf] net: mvneta: disable IP checksum with jumbo frames for Armada 370
 +    - [arm64] Don't report clear pmds and puds as huge
 +    - fuse: initialize fc->release before calling it
 +    - vfs: Ignore unlocked mounts in fs_fully_visible
 +    - proc: Allow creating permanently empty directories that serve as mount
 +      points
 +    - mnt: Update fs_fully_visible to test for permanently empty directories
 +    - ACPICA: Tables: Enable both 32-bit and 64-bit FACS (regression in 3.14)
 +    - ACPICA: Tables: Fix an issue that FACS initialization is performed twice
 +    - ACPICA: Tables: Enable default 64-bit FADT addresses favor
 +    - [x86] KVM: make vapics_in_nmi_mode atomic
 +    - [s390x] KVM: virtio-ccw: don't overwrite config space values
 +    - 9p: forgetting to cancel request on interrupted zero-copy RPC
 +    - e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size
 +      (regression in 3.15)
 +    - ath9k_htc: memory corruption calling set_bit()
 +    - mac80211: prevent possible crypto tx tailroom corruption
 +    - cfg80211: ignore netif running state when changing iftype
 +    - Btrfs: lock superblock before remounting for rw subvol
 +      (regression in 3.15)
 +    - of: return NUMA_NO_NODE from fallback of_node_to_nid()
 +      (regression in 3.13)
 +    - sched/fair: Prevent throttling in early pick_next_task_fair()
 +      (regression in 3.15)
 +    - ACPI / init: Switch over platform to the ACPI mode later
 +      (regression in 3.14)
 +    - [armhf] drm/tegra: dpaux: Fix transfers larger than 4 bytes
 +    - mmc: card: Fixup request missing in mmc_blk_issue_rw_rq
 +    - perf: Fix ring_buffer_attach() RCU sync, again
 +    - LZ4 : fix the data abort issue
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt16
 +    - Btrfs: use kmem_cache_free when freeing entry in inode cache
 +    - Btrfs: fix race between caching kthread and returning inode to inode cache
 +    - Btrfs: fix fsync data loss after append write
 +    - ext4: fix reservation release on invalidatepage for delalloc fs
 +    - ext4: be more strict when migrating to non-extent based file
 +    - ext4: correctly migrate a file with a hole at the beginning
 +    - 9p: don't leave a half-initialized inode sitting around
 +    - thermal: step_wise: fix: Prevent from binary overflow when trend is
 +      dropping
 +    - dm btree remove: fix bug in redistribute3
 +    - [armhf] crypto: omap-des - Fix unmapping of dma channels
 +    - [armhf] usb: musb: host: rely on port_mode to call musb_start()
 +      (regression in 3.13)
 +    - drm: add a check for x/y in drm_mode_setcrtc
 +    - bio integrity: do not assume bio_integrity_pool exists if bioset exists
 +    - Btrfs: fix memory leak in the extent_same ioctl
 +    - Btrfs: fix list transaction->pending_ordered corruption
 +    - Btrfs: fix file corruption after cloning inline extents
 +    - [armel,armhf] 8404/1: dma-mapping: fix off-by-one error in bitmap size
 +      check (regression in 3.15)
 +    - net: graceful exit from netif_alloc_netdev_queues()
 +    - ip_tunnel: fix ipv4 pmtu check to honor inner ip header df
 +      (regression in 3.11)
 +    - net: do not process device backlog during unregistration
 +    - rds: rds_ib_device.refcount overflow
 +    - mm: avoid setting up anonymous pages into file mapping
 +    - HID: cp2112: fix to force single data-report reply
 +    - [armhf] net: mvneta: fix refilling for Rx DMA buffers
 +    - [armhf] usb: dwc3: gadget: return error if command sent to DEPCMD register
 +      fails
 +    - usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
 +      function
 +    - usb: core: lpm: set lpm_capable for root hub device (regression in 3.15)
 +    - USB: OHCI: Fix race between ED unlink and URB submission
 +      (regression in 3.16.2)
 +    - usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
 +    - md/raid1: fix test for 'was read error from last working device'.
 +    - [armhf] mmc: omap_hsmmc: Fix DTO and DCRC handling
 +    - bonding: correctly handle bonding type change on enslave failure
 +    - inet: frags: fix defragmented packet's IP header for af_packet
 +    - vfs: freeing unlinked file indefinitely delayed
 +    - mmc: sdhci: Fix FSL ESDHC reset handling quirk (regression in 3.16)
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt17
 +    - sysfs: Create mountpoints with sysfs_create_mount_point
 +    - iscsi-target: Fix use-after-free during TPG session shutdown
 +    - iscsi-target: Fix iscsit_start_kthreads failure OOPs
 +      (regression in 3.16.7-ckt11)
 +    - iscsi-target: Fix iser explicit logout TX kthread leak
 +      (regression in 3.16.7-ckt11)
 +    - xfs: remote attribute headers contain an invalid LSN
 +    - xfs: remote attributes need to be considered data
 +    - [x86] drm/i915: Replace WARN inside I915_READ64_2x32 with retry loop
 +    - ipr: Fix locking for unit attention handling
 +    - ipr: Fix invalid array indexing for HRRQ
 +    - [x86] xen: Probe target addresses in set_aliased_prot() before the
 +      hypercall
 +    - netfilter: ctnetlink: put back references to master ct and expect object
 +      (regression in 3.12)
 +    - ipvs: do not use random local source address for tunnels
 +    - ipvs: fix crash if scheduler is changed
 +    - ipvs: fix crash with sync protocol v0 and FTP
 +    - NFS: Don't revalidate the mapping if both size and change attr are up to
 +      date (regression in 3.16)
 +    - packet: missing dev_put() in packet_do_bind()
 +    - packet: tpacket_snd(): fix signed/unsigned comparison
 +    - net: sched: fix refcount imbalance in actions
 +    - act_pedit: check binding before calling tcf_hash_release()
 +    - nfsd: Drop BUG_ON and ignore SECLABEL on absent filesystem
 +    - [armel/ixp4xx] crypto: Remove bogus BUG_ON on scattered dst buffer
 +    - rbd: fix copyup completion race
 +    - md/bitmap: return an error when bitmap superblock is corrupt.
 +    - md/raid1: extend spinlock to protect raid1_end_read_request against
 +      inconsistencies
 +    - [armhf] thermal: exynos: Disable the regulator on probe failure
 +    - xhci: fix off by one error in TRB DMA address boundary check
 +    - mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations
 +    - [mips*] Make set_pte() SMP safe.
 +    - ipc: modify message queue accounting to not take kernel data structures
 +      into account
 +    - ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
 +    - fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()
 +    - rtnetlink: verify IFLA_VF_INFO attributes before passing them to driver
 +    - net/tipc: initialize security state for new connection socket
 +    - net: call rcu_read_lock early in process_backlog
 +    - net: Clone skb before setting peeked flag
 +    - net: Fix skb csum races when peeking
 +    - net: Fix skb_set_peeked use-after-free bug
 +    - ipv6: lock socket in ip6_datagram_connect()
 +    - netlink: don't hold mutex in rcu callback when releasing mmapd ring
 +    - rds: fix an integer overflow test in rds_info_getsockopt()
 +    - udp: fix dst races with multicast early demux
 +    - bna: fix interrupts storm caused by erroneous packets (regression in 3.14)
 +    - net: gso: use feature flag argument in all protocol gso handlers
 +    - ext4: avoid deadlocks in the writeback path by using sb_getblk_gfp
 +    - xen-blkfront: don't add indirect pages to list when !feature_persistent
 +    - xen-blkback: replace work_pending with work_busy in purge_persistent_gnt()
 +    - regmap: regcache-rbtree: Clean new present bits on present bitmap resize
 +      (regression in 3.12)
 +    - target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
 +    - [x86] ldt: Make modify_ldt synchronous
 +    - [x86] ldt: Correct LDT access in single stepping logic
 +    - [i386] ldt: Correct FPU emulation access to LDT
 +    - dm btree: add ref counting ops for the leaves of top level btrees
 +    - libfc: Fix fc_exch_recv_req() error path (regression in 3.13)
 +    - libfc: Fix fc_fcp_cleanup_each_cmd()
 +    - [x86] drm/vmwgfx: Fix execbuf locking issues
 +    - mm/hwpoison: fix page refcount of unknown non LRU page
 +    - ipc,sem: fix use after free on IPC_RMID after a task using same semaphore
 +      set exits
 +    - ipc/sem.c: change memory barrier in sem_lock() to smp_rmb()
 +    - ipc/sem.c: update/correct memory barriers
 +    - [mips*] Fix seccomp syscall argument for MIPS64 (regression in 3.15)
 +    - [i386] ldt: Further fix FPU emulation
 +    - ALSA: usb-audio: Fix runtime PM unbalance (regression in 3.15)
 +    - libata: Add factory recertified Crucial M500s to blacklist
 +    - [arm64] KVM: Fix host crash when injecting a fault into a 32bit guest
 +    - batman-adv: fix kernel crash due to missing NULL checks
 +      (regression in 3.16)
 +    - batman-adv: protect tt_local_entry from concurrent delete events
 +    - perf: Fix PERF_EVENT_IOC_PERIOD migration race (regression in 3.14)
 +    - net: Fix RCU splat in af_key
 +    - ip6_gre: release cached dst on tunnel removal
 +    - xen/gntdevt: Fix race condition in gntdev_release()
 +    - signalfd: fix information leak in signalfd_copyinfo
 +    - signal: fix information leak in copy_siginfo_to_user
 +    - signal: fix information leak in copy_siginfo_from_user32
 +
 +  [ Ben Hutchings ]
 +  * [x86] vmwgfx: Enable DRM_VMWGFX_FBCON (Closes: #714929)
 +  * [x86] edac: Add edac_ie31200 driver from Linux 3.17 (Closes: #780773)
 +  * [mips*] Correct FP ISA requirements (Closes: #781892)
 +  * Revert "ACPICA: Utilities: split IO address types from data type models."
 +    to avoid ABI change on i386
 +  * libata: add ATA_HORKAGE_NOTRIM
 +  * libata: force disable trim for SuperSSpeed S238
 +  * block: Do a full clone when splitting discard bios (Closes: #793326)
 +  * [armel,sh4] linux-image: Recommend u-boot-tools rather than the obsolete
 +    uboot-mkimage package (Closes: #793608)
 +  * linux-source: Depend on xz-utils, not bzip2 (Closes: #796940)
 +  * [x86] i2c: i801: Use wait_event_timeout to wait for interrupts
 +    (Closes: #799786)
 +  * Adjust for migration to git:
 +    - Update .gitignore files
 +    - debian/control: Update Vcs-* fields
 +    - README.Debian, README.source: Update references to svn
 +  * media: uvcvideo: Disable hardware timestamps by default (Closes: #794327)
 +
 +  [ Ian Campbell ]
 +  * [xen] xen-netback: return correct ethtool stats (Closes: #786936)
 +  * of: make sure of_alias is initialized before accessing it.
 +    (Closes: #784053)
 +
 +  [ Uwe Kleine-König ]
 +  * Merge jessie-security changes
 +
 +  [ Aurelien Jarno ]
 +  * [mips*] Correct FP emulation delay slot exception propagation.
 +  * [mips*el/loongson3] Set Loongson 3 ISA to MIPS64R1 to correctly emulate
 +    the corresponding FP instructions.
 +
 + -- Ben Hutchings <ben at decadent.org.uk>  Sat, 26 Sep 2015 16:03:16 +0100
 +
+ linux (3.16.7-ckt11-1+deb8u5) jessie-security; urgency=medium
+ 
+   [ Ben Hutchings ]
+   * USB: whiteheat: fix potential null-deref at probe (CVE-2015-5257)
+   * sctp: fix race on protocol/netns initialization (CVE-2015-5283)
+ 
+   [ Salvatore Bonaccorso ]
+   * ipc: fully initialize sem_array before making it visible
+   * ipc: Initialize msg/shm IPC objects before doing ipc_addid()
+     (CVE-2015-7613)
+ 
+  -- Ben Hutchings <ben at decadent.org.uk>  Fri, 09 Oct 2015 23:30:36 +0100
+ 
  linux (3.16.7-ckt11-1+deb8u4) jessie-security; urgency=medium
  
    * ipv6: addrconf: validate new MTU before applying it (CVE-2015-0272)
diff --cc debian/patches/series
index 1b8217f,e7529f0..4b35a66
--- a/debian/patches/series
+++ b/debian/patches/series
@@@ -636,8 -648,7 +636,12 @@@ bugfix/all/rds-verify-the-underlying-tr
  bugfix/all/namei-lift-open-coded-terminate_walk-in-follow_dotdo.patch
  bugfix/all/dcache-handle-escaped-paths-in-prepend_path.patch
  bugfix/all/vfs-test-for-and-handle-paths-that-are-unreachable-f.patch
+ bugfix/all/usb-whiteheat-fix-potential-null-deref-at-probe.patch
+ bugfix/all/sctp-fix-race-on-protocol-netns-initialization.patch
+ bugfix/all/ipc-sem.c-fully-initialize-sem_array-before-making-i.patch
+ bugfix/all/Initialize-msg-shm-IPC-objects-before-doing-ipc_addid.patch
 +bugfix/x86/i2c-i801-Use-wait_event_timeout-to-wait-for-interrup.patch
 +bugfix/all/media-uvcvideo-disable-hardware-timestamps-by-defaul.patch
 +bugfix/all/nbd-fix-timeout-detection.patch
 +bugfix/all/nbd-remove-variable-pid.patch
 +bugfix/all/nbd-add-locking-for-tasks.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git



More information about the Kernel-svn-changes mailing list