[linux] 01/04: Merge tag 'debian/3.16.7-ckt11-1+deb8u4' into jessie

debian-kernel at lists.debian.org debian-kernel at lists.debian.org
Tue Sep 22 19:19:41 UTC 2015


This is an automated email from the git hooks/post-receive script.

benh pushed a commit to branch jessie
in repository linux.

commit 8cf76f1544c790f46cc236958a7c7b9a7b8b7085
Merge: 9b176d3 7a15f4d
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Tue Sep 22 16:41:16 2015 +0200

    Merge tag 'debian/3.16.7-ckt11-1+deb8u4' into jessie

 debian/changelog                                   |  16 ++++
 ...ache-handle-escaped-paths-in-prepend_path.patch |  58 ++++++++++++
 ...rconf-validate-new-MTU-before-applying-it.patch |  61 ++++++++++++
 ...open-coded-terminate_walk-in-follow_dotdo.patch |  66 +++++++++++++
 ...the-underlying-transport-exists-before-cr.patch |  74 +++++++++++++++
 ...r-and-handle-paths-that-are-unreachable-f.patch | 103 +++++++++++++++++++++
 .../vhost-actually-track-log-eventfd-file.patch    |  28 ++++++
 .../all/virtio-net-drop-netif_f_fraglist.patch     |  36 +++++++
 .../features/all/aufs3/aufs3-mmap-fix-races.patch  |  50 ++++++++++
 debian/patches/series                              |   8 ++
 10 files changed, 500 insertions(+)

diff --cc debian/changelog
index 076126e,a334bc1..fea23b1
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,487 -1,19 +1,503 @@@
 +linux (3.16.7-ckt15-1) UNRELEASED; urgency=medium
 +
 +  * New upstream stable updates:
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt12
 +    - mlx4: Fix tx ring affinity_mask creation
 +    - net/mlx4_en: Schedule napi when RX buffers allocation fails
 +    - efi/reboot: Add generic wrapper around EfiResetSystem()
 +    - efi/reboot: Allow powering off machines using EFI
 +    - [x86] reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag
 +    - UBI: fix soft lockup in ubi_check_volume()
 +    - mnt: Fail collect_mounts when applied to unmounted mounts
 +    - ASoC: dapm: Enable autodisable on SOC_DAPM_SINGLE_TLV_AUTODISABLE
 +    - ASoC: rt5677: add register patch for PLL
 +    - btrfs: unlock i_mutex after attempting to delete subvolume during send
 +    - ALSA: hda - Fix mute-LED fixed mode
 +    - ALSA: hda - Add mute-LED mode control to Thinkpad
 +    - [arm64] dma-mapping: always clear allocated buffers
 +    - ALSA: emu10k1: Fix card shortname string buffer overflow
 +    - ALSA: emux: Fix mutex deadlock at unloading
 +    - drm/radeon: add SI DPM quirk for Sapphire R9 270 Dual-X 2G GDDR5
 +    - SCSI: add 1024 max sectors black list flag
 +    - 3w-sas: fix command completion race
 +    - 3w-xxxx: fix command completion race
 +    - 3w-9xxx: fix command completion race
 +    - usb: chipidea: otg: remove mutex unlock and lock while stop and start role
 +    - [armhf] cdc-acm: prevent infinite loop when parsing CDC headers.
 +    - serial: of-serial: Remove device_type = "serial" registration
 +    - ALSA: emux: Fix mutex deadlock in OSS emulation
 +    - ALSA: emu10k1: Emu10k2 32 bit DMA mode
 +    - rbd: end I/O the entire obj_request on error
 +    - bridge/mdb: remove wrong use of NLM_F_MULTI
 +    - mlx4_en: Use correct loop cursor in error path.
 +    - [powerpc*] pseries: Correct cpu affinity for dlpar added cpus
 +    - Revert "i2c: Mark adapter devices with pm_runtime_no_callbacks"
 +    - Revert "mm/hugetlb: use pmd_page() in follow_huge_pmd()"
 +    - [armhf,arm64] KVM: Fix and refactor unmap_range
 +    - [armhf] KVM: Unmap IPA on memslot delete/move
 +    - [armhf] KVM: user_mem_abort: support stage 2 MMIO page mapping
 +    - [arm64] KVM: export demux regids as KVM_REG_ARM64
 +    - [armhf,arm64] virt: fix wrong HSCTLR.EE bit setting
 +    - [arm64] KVM: store kvm_vcpu_fault_info est_el2 as word
 +    - [armhf,arm64] KVM: fix non-const declaration of function returning const
 +    - [armhf,arm64] KVM: fix broken __percpu annotation
 +    - [armhf,arm64] KVM: avoid returning negative error code as bool
 +    - [armhf,arm64] KVM: vgic: return int instead of bool when checking I/O
 +      ranges
 +    - [armhf,arm64] KVM: fix use of WnR bit in kvm_is_write_fault()
 +    - [armhf] KVM: vgic: plug irq injection race
 +    - [armhf,arm64] KVM: Fix set_clear_sgi_pend_reg offset
 +    - [armhf,arm64] KVM: Fix VTTBR_BADDR_MASK and pgd alloc
 +    - [armhf] kvm: fix CPU hotplug
 +    - [armhf,arm64] KVM: fix potential NULL dereference in user_mem_abort()
 +    - [armhf,arm64] KVM: Ensure memslots are within KVM_PHYS_SIZE
 +    - [armhf] kvm: STRICT_MM_TYPECHECKS fix for user_mem_abort
 +    - [arm64] KVM: fix unmapping with 48-bit VAs
 +    - [armhf,arm64] KVM: vgic: Fix error code in kvm_vgic_create()
 +    - [arm64] kvm: Fix assembler compatibility of macros
 +    - [armhf,arm64] kvm: drop inappropriate use of kvm_is_mmio_pfn()
 +    - [armhf,arm64] KVM: Don't clear the VCPU_POWER_OFF flag
 +    - [armhf,arm64] KVM: Correct KVM_ARM_VCPU_INIT power off option
 +    - [armhf,arm64] KVM: Reset the HCR on each vcpu when resetting the vcpu
 +    - [armhf,arm64] KVM: Introduce stage2_unmap_vm
 +    - [armhf,arm64] KVM: Don't allow creating VCPUs after vgic_initialized
 +    - [armhf,arm64 KVM: Require in-kernel vgic for the arch timers
 +    - [arm64] KVM: Fix TLB invalidation by IPA/VMID
 +    - [arm64] KVM: Fix HCR setting for 32bit guests
 +    - [arm64] KVM: Do not use pgd_index to index stage-2 pgd
 +    - [armhf,arm64] KVM: Keep elrsr/aisr in sync with software model
 +    - net: make skb_gso_segment error handling more robust
 +    - efivarfs: Ensure VariableName is NUL-terminated
 +    - [x86] efi: Store upper bits of command line buffer address in
 +      ext_cmd_line_ptr
 +    - blk-mq: fix CPU hotplug handling
 +    - writeback: use |1 instead of +1 to protect against div by zero
 +    - [armhf] dts: imx6: phyFLEX: USB VBUS control is active-high
 +    - gpio: unregister gpiochip device before removing it
 +    - gpio: sysfs: fix memory leaks and device hotplug
 +    - ACPI / PNP: add two IDs to list for PNPACPI device enumeration
 +    - [armhf] OMAP2+: Fix omap off idle power consumption creeping up
 +    - [armhf] dts: OMAP3-N900: Add microphone bias voltages
 +    - drm/radeon: disable semaphores for UVD V1 (v2)
 +    - RDMA/CMA: Canonize IPv4 on IPV6 sockets properly
 +    - [x86] drm/i915: Add missing MacBook Pro models with dual channel LVDS
 +    - efi: Fix error handling in add_sysfs_runtime_map_entry()
 +    - xen/events: Clear cpu_evtchn_mask before resuming
 +    - xen/xenbus: Update xenbus event channel on resume
 +    - xen/console: Update console event channel on resume
 +    - xen/events: Set irq_info->evtchn before binding the channel to CPU in
 +      __startup_pirq()
 +    - mm/memory-failure: call shake_page() when error hits thp tail page
 +    - mm: soft-offline: fix num_poisoned_pages counting on concurrent events
 +    - nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
 +    - ocfs2: dlm: fix race between purge and get lock resource
 +    - [x86] drm/i915/dp: there is no audio on port A
 +    - drm/radeon: make VCE handle check more strict
 +    - drm/radeon: make UVD handle checking more strict
 +    - drm/radeon: more strictly validate the UVD codec
 +    - path_openat(): fix double fput()
 +    - mnt: Fix fs_fully_visible to verify the root directory is visible
 +    - xen-pciback: Add name prefix to global 'permissive' variable
 +    - mmc: core: add missing pm event in mmc_pm_notify to fix hib restore
 +    - mmc: sh_mmcif: Fix timeout value for command request
 +    - mmc: card: Don't access RPMB partitions for normal read/write
 +    - pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
 +    - ACPICA: Utilities: split IO address types from data type models.
 +    - ACPICA: Tables: Change acpi_find_root_pointer() to use
 +      acpi_physical_address.
 +    - ACPICA: Utilities: Cleanup to enforce ACPI_PHYSADDR_TO_PTR()/
 +      ACPI_PTR_TO_PHYSADDR().
 +    - ACPICA: Utilities: Cleanup to convert physical address printing formats.
 +    - ACPICA: Utilities: Cleanup to remove useless ACPI_PRINTF/FORMAT_xxx
 +      helpers.
 +    - crush: ensuring at most num-rep osds are selected
 +    - netfilter: nf_tables: fix error handling of rule replacement
 +    - netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
 +    - netfilter: nf_tables: check for overflow of rule dlen field
 +    - netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
 +    - netfilter: nf_tables: allow to change chain policy without hook if it
 +      exists
 +    - netfilter: nft_rbtree: fix locking
 +    - [arm64] mm: Remove hack in mmap randomize layout
 +    - sched/autogroup: Fix failure to set cpu.rt_runtime_us
 +    - xprtrdma: Free the pd if ib_query_qp() fails
 +    - xfs: ensure truncate forces zeroed blocks to disk
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt13
 +    - [x86] kprobes: Return correct length in __copy_instruction()
 +    - iio: light: hid-sensor-prox: Fix modifier
 +    - iio: pressure: hid-sensor-press: Fix modifier
 +    - libata: Add helper to determine when PHY events should be ignored
 +    - libata: Ignore spurious PHY event on LPM policy change
 +    - iio:st_sensors: Fix oops when probing SPI devices
 +    - usb: gadget: configfs: Fix interfaces array NULL-termination
 +    - rtlwifi: rtl8192cu: Fix kernel deadlock
 +    - USB: cp210x: add ID for KCF Technologies PRN device
 +    - USB: pl2303: Remove support for Samsung I330
 +    - USB: visor: Match I330 phone more precisely
 +    - net: can: xilinx_can: fix extended frame handling
 +    - nfsd: fix the check for confirmed openowner in nfs4_preprocess_stateid_op
 +    - svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
 +    - libata: Blacklist queued TRIM on all Samsung 800-series (Closes: #790520)
 +    - ACPI / init: Fix the ordering of acpi_reserve_resources()
 +    - md/raid5: don't record new size if resize_stripes fails.
 +    - sched: Handle priority boosted tasks proper in setscheduler()
 +    - xhci: fix isoc endpoint dequeue from advancing too far on transaction
 +      error
 +    - xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256
 +    - xhci: gracefully handle xhci_irq dead device
 +    - usb-storage: Add NO_WP_DETECT quirk for Lacie 059f:0651 devices
 +    - ahci: avoton port-disable reset-quirk
 +    - tty/n_gsm.c: fix a memory leak when gsmtty is removed
 +    - [armel,armhf] net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K
 +      intruction.
 +    - [x86] perf/rapl: Enable Broadwell-U RAPL support
 +    - drm/radeon: fix VM_CONTEXT*_PAGE_TABLE_END_ADDR handling
 +    - RDMA/core: Fix for parsing netlink string attribute
 +    - drm/radeon: add new bonaire pci id (Closes: #792099)
 +    - [hppa] Fix crashes due to stack randomization on stack-grows-upwards
 +      architectures
 +    - firmware: dmi_scan: Fix ordering of product_uuid
 +    - ext4: fix NULL pointer dereference when journal restart fails
 +    - ext4: check for zero length extent explicitly
 +    - jbd2: fix r_count overflows leading to buffer overflow in journal recovery
 +    - mm, numa: really disable NUMA balancing by default on single node machines
 +    - spi: bitbang: Make setup_transfer() callback optional
 +    - igb: Fix oops on changing number of rings
 +    - igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector
 +    - [arm64] add missing PAGE_ALIGN() to __dma_free()
 +    - [armhf] 8307/1: psci: move psci firmware calls out of line
 +    - staging: rtl8712, rtl8712: avoid lots of build warnings
 +    - qla2xxx: remove redundant declaration in 'qla_gbl.h'
 +    - net: socket: Fix the wrong returns for recvmsg and sendmsg
 +    - ALSA: hda - Add headphone quirk for Lifebook E752
 +    - [armhf] ASoC: mc13783: Fix wrong mask value used in mc13xxx_reg_rmw()
 +      calls
 +    - [armhf] thermal: armada: Update Armada 380 thermal sensor coefficients
 +    - mac80211: move WEP tailroom size check
 +    - [x86] KVM: MMU: fix smap permission check
 +    - [x86] KVM: MMU: fix CR4.SMEP=1, CR0.WP=0 with shadow pages
 +    - [x86] KVM: MMU: fix SMAP virtualization
 +    - [x86] storvsc: Set the SRB flags correctly when no data transfer is needed
 +    - Input: elantech - fix semi-mt protocol for v3 HW
 +    - [powerpc*] Align TOC to 256 bytes
 +    - ALSA: hda - Add Conexant codecs CX20721, CX20722, CX20723 and CX20724
 +    - ALSA: hda/realtek - ALC292 dock fix for Thinkpad L450
 +    - mmc: atmel-mci: fix bad variable type for clkdiv
 +    - sd: Disable support for 256 byte/sector disks
 +    - xen/events: don't bind non-percpu VIRQs with percpu chip
 +    - libceph: request a new osdmap if lingering request maps to no osd
 +    - crypto: s390/ghash - Fix incorrect ghash icv buffer handling.
 +    - ipvs: fix memory leak in ip_vs_ctl.c
 +    - tcp/ipv6: fix flow label setting in TIME_WAIT state
 +    - ipv6: do not delete previously existing ECMP routes if add fails
 +    - ipv6: fix ECMP route replacement
 +    - ipv4: Avoid crashing in ip_error
 +    - bridge: fix parsing of MLDv2 reports
 +    - [armel,armhf] fix missing syscall trace exit
 +    - module: Call module notifier on failure after complete_formation()
 +    - gpio: gpio-kempld: Fix get_direction return value
 +    - [armel,armhf] 8356/1: mm: handle non-pmd-aligned end of RAM
 +    - mac80211: don't use napi_gro_receive() outside NAPI context
 +    - [armhf] dts: set display clock correctly for exynos4412-trats2
 +    - Revert "ALSA: hda - Add mute-LED mode control to Thinkpad"
 +    - hwmon: (ntc_thermistor) Ensure iio channel is of type IIO_VOLTAGE
 +    - drm/radeon: partially revert "fix VM_CONTEXT*_PAGE_TABLE_END_ADDR
 +      handling"
 +    - xfs: xfs_attr_inactive leaves inconsistent attr fork state behind
 +    - fs, omfs: add NULL terminator in the end up the token list
 +    - vfs: d_walk() might skip too much
 +    - hwmon: (nct6775) Add missing sysfs attribute initialization
 +    - target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST
 +    - [x86] bpf_jit: fix compilation of large bpf programs
 +    - net_sched: invoke ->attach() after setting dev->qdisc
 +    - fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings
 +    - rt2x00: add new rt2800usb device DWA 130
 +    - udf: Remove repeated loads blocksize
 +    - udf: Check length of extended attributes and allocation descriptors
 +      (CVE-2015-4167)
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt14
 +    - USB: serial: ftdi_sio: Add support for a Motion Tracker Development Board
 +    - [armhf] serial: imx: Fix DMA handling for IDLE condition aborts
 +    - [armhf] usb: dwc3: gadget: Fix incorrect DEPCMD and DGCMD status macros
 +    - ALSA: usb-audio: Add mic volume fix quirk for Logitech Quickcam Fusion
 +    - n_tty: Fix auditing support for cannonical mode
 +    - [x86] drm/i915/hsw: Fix workaround for server AUX channel clock divisor
 +    - [x86] asm/irq: Stop relying on magic JMP behavior for early_idt_handlers
 +    - lib: Fix strnlen_user() to not touch memory after specified maximum
 +    - Input: elantech - fix detection of touchpads where the revision matches a
 +      known rate
 +    - ALSA: hda/realtek - Add a fixup for another Acer Aspire 9420
 +    - ALSA: usb-audio: add MAYA44 USB+ mixer control names
 +    - ALSA: usb-audio: fix missing input volume controls in MAYA44 USB(+)
 +    - USB: cp210x: add ID for HubZ dual ZigBee and Z-Wave dongle
 +    - Input: elantech - add new icbody type
 +    - xfrm: fix a race in xfrm_state_lookup_byspi
 +    - thermal: step_wise: Revert optimization
 +    - net: core: Correct an over-stringent device loop detection.
 +    - net: phy: Allow EEE for all RGMII variants
 +    - net: dp83640: fix broken calibration routine.
 +    - net: dp83640: reinforce locking rules.
 +    - unix/caif: sk_socket can disappear when state is unlocked
 +    - xen/netback: Properly initialize credit_bytes
 +    - udp: fix behavior of wrong checksums
 +    - xen: netback: read hotplug script once at start of day.
 +    - ipv4/udp: Verify multicast group is ours in upd_v4_early_demux()
 +    - bridge: disable softirqs around br_fdb_update to avoid lockup
 +    - [x86] drm/i915: Assume dual channel LVDS if pixel clock necessitates it
 +    - Btrfs: send, add missing check for dead clone root
 +    - Btrfs: send, don't leave without decrementing clone root's send_progress
 +    - btrfs: incorrect handling for fiemap_fill_next_extent return
 +    - btrfs: cleanup orphans while looking up default subvolume
 +    - [x86] iommu/vt-d: Allow RMRR on graphics devices too
 +    - [x86] iommu/vt-d: Fix passthrough mode with translation-disabled devices
 +    - virtio_pci: Clear stale cpumask when setting irq affinity
 +    - [armhf] irqchip: sunxi-nmi: Fix off-by-one error in irq iterator
 +    - Input: synaptics - add min/max quirk for Lenovo S540
 +    - [x86] drm/i915: Fix DDC probe for passive adapters
 +    - cfg80211: wext: clear sinfo struct before calling driver
 +    - mm/memory_hotplug.c: set zone->wait_table to null after freeing it
 +    - ring-buffer-benchmark: Fix the wrong sched_priority of producer
 +    - block: fix ext_dev_lock lockdep report
 +    - iser-target: Fix variable-length response error completion
 +    - iser-target: release stale iser connections
 +    - ALSA: hda - adding a DAC/pin preference map for a HP Envy TS machine
 +    - drm/mgag200: Reject non-character-cell-aligned mode widths
 +    - crypto: caam - fix uninitialized state->buf_dma field
 +    - crypto: caam - improve initalization for context state saves
 +    - crypto: caam - fix RNG buffer cache alignment
 +    - tracing: Have filter check for balanced ops
 +    - [x86] drm/radeon: fix freeze for laptop with Turks/Thames GPU.
 +    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt15
 +    - ARM: clk-imx6q: refine sata's parent
 +    - KVM: nSVM: Check for NRIPS support before updating control field
 +    - nfs: take extra reference to fl->fl_file when running a setlk
 +    - bridge: fix multicast router rlist endless loop
 +    - net: don't wait for order-3 page allocation
 +    - sctp: fix ASCONF list handling
 +    - bridge: fix br_stp_set_bridge_priority race conditions
 +    - packet: read num_members once in packet_rcv_fanout()
 +    - packet: avoid out of bounds read in round robin fanout
 +    - neigh: do not modify unlinked entries
 +    - tcp: Do not call tcp_fastopen_reset_cipher from interrupt context
 +    - net: phy: fix phy link up when limiting speed via device tree
 +    - sctp: Fix race between OOTB responce and route removal
 +    - x86/mce: Fix MCE severity messages
 +    - [media] s5h1420: fix a buffer overflow when checking userspace params
 +    - [media] cx24116: fix a buffer overflow when checking userspace params
 +    - [media] af9013: Don't accept invalid bandwidth
 +    - [media] cx24117: fix a buffer overflow when checking userspace params
 +    - spi: fix race freeing dummy_tx/rx before it is unmapped
 +    - mtd: fix: avoid race condition when accessing mtd->usecount
 +    - intel_pstate: set BYT MSR with wrmsrl_on_cpu()
 +    - leds / PM: fix hibernation on arm when gpio-led used with CPU led trigger
 +    - crypto: talitos - avoid memleak in talitos_alg_alloc()
 +    - Revert "crypto: talitos - convert to use be16_add_cpu()"
 +    - genirq: devres: Fix testing return value of request_any_context_irq()
 +    - ASoC: wm8737: Fixup setting VMID Impedance control register
 +    - ASoC: wm8903: Fix define for WM8903_VMID_RES_250K
 +    - mnt: Refactor the logic for mounting sysfs and proc in a user namespace
 +    - ASoC: wm8955: Fix setting wrong register for WM8955_K_8_0_MASK bits
 +    - scsi_transport_srp: Introduce srp_wait_for_queuecommand()
 +    - scsi_transport_srp: Fix a race condition
 +    - KVM: mips: use id_to_memslot correctly
 +    - w1_therm reference count family data
 +    - drm/radeon: take the mode_config mutex when dealing with hpds (v2)
 +    - usb: dwc3: gadget: return error if command sent to DGCMD register fails
 +    - rcu: Correctly handle non-empty Tiny RCU callback list with none ready
 +    - ASoC: arizona: Fix noise generator gain TLV
 +    - usb: dwc3: gadget: don't clear EP_BUSY too early
 +    - staging: rtl8712: prevent buffer overrun in recvbuf2recvframe
 +    - usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset
 +    - staging: vt6655: device_rx_srv check sk_buff is NULL
 +    - fixing infinite OPEN loop in 4.0 stateid recovery
 +    - ideapad_laptop: Lenovo G50-30 fix rfkill reports wireless blocked
 +    - powerpc/perf: Fix book3s kernel to userspace backtraces
 +    - SUNRPC: Fix a memory leak in the backchannel code
 +    - ipr: Increase default adapter init stage change timeout
 +    - ieee802154: Fix sockaddr_ieee802154 implicit padding information leak.
 +    - mnt: Modify fs_fully_visible to deal with locked ro nodev and atime
 +    - drm/qxl: Do not cause spice-server to clean our objects
 +    - drm/qxl: Do not leak memory if qxl_release_list_add fails
 +    - selinux: fix setting of security labels on NFS
 +    - ath3k: Add support of 0489:e076 AR3012 device
 +    - ath3k: add support of 13d3:3474 AR3012 device
 +    - Bluetooth: btusb: Fix memory leak in Intel setup routine
 +    - ath9k: fix DMA stop sequence for AR9003+
 +    - b43: fix support for 14e4:4321 PCI dev with BCM4321 chipset
 +    - cdc-acm: Add support of ATOL FPrint fiscal printers
 +    - regulator: core: fix constraints output buffer
 +    - ACPI / PM: Add missing pm_generic_complete() invocation
 +    - x86/PCI: Use host bridge _CRS info on Foxconn K8M890-8237A
 +    - pinctrl: mvebu: armada-38x: fix PCIe functions
 +    - pinctrl: mvebu: armada-370: fix spi0 pin description
 +    - pinctrl: mvebu: armada-375: remove non-existing NAND re/we pins
 +    - pinctrl: mvebu: armada-xp: remove non-existing NAND pins
 +    - pinctrl: mvebu: armada-xp: remove non-existing VDD cpu_pd functions
 +    - pinctrl: mvebu: armada-xp: fix functions of MPP48
 +    - pinctrl: mvebu: armada-375: remove incorrect space in pin description
 +    - pinctrl: mvebu: armada-38x: fix incorrect total number of GPIOs
 +    - i2c: at91: fix a race condition when using the DMA controller
 +    - dmaengine: mv_xor: bug fix for racing condition in descriptors cleanup
 +    - ASoC: wm8960: the enum of "DAC Polarity" should be wm8960_enum[1]
 +    - arm64: Do not attempt to use init_mm in reset_context()
 +    - ext4: fix race between truncate and __ext4_journalled_writepage()
 +    - Disable write buffering on Toshiba ToPIC95
 +    - fs/ufs: revert "ufs: fix deadlocks introduced by sb mutex merge"
 +    - jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail()
 +    - regmap: Fix regmap_bulk_read in BE mode
 +    - jbd2: fix ocfs2 corrupt when updating journal superblock fails
 +    - ideapad: fix software rfkill setting
 +    - fs/ufs: restore s_lock mutex
 +    - regmap: Fix possible shift overflow in regmap_field_init()
 +    - ima: fix ima_show_template_data_ascii()
 +    - nfs: increase size of EXCHANGE_ID name string buffer
 +    - vTPM: set virtual device before passing to ibmvtpm_reset_crq
 +    - arm: KVM: force execution of HCPTR access on VM exit
 +    - arm64: mm: Fix freeing of the wrong memmap entries with !SPARSEMEM_VMEMMAP
 +    - dm space map metadata: fix occasional leak of a metadata block on resize
 +    - dm stats: fix divide by zero if 'number_of_areas' arg is zero
 +    - x86/PCI: Use host bridge _CRS info on systems with >32 bit addressing
 +    - pNFS: Fix a memory leak when attempted pnfs fails
 +    - ACPI / PNP: Avoid conflicting resource reservations
 +    - Bluetooth: ath3k: add support of 04ca:300f AR3012 device
 +    - Bluetooth: ath3k: Add support of 04ca:300d AR3012 device
 +    - libata: Do not blacklist Micron M500DC
 +    - arm64: vdso: work-around broken ELF toolchains in Makefile
 +    - iommu/amd: Handle large pages correctly in free_pagetable
 +    - ext4: call sync_blockdev() before invalidate_bdev() in put_super()
 +    - MIPS: Fix KVM guest fixmap address
 +    - xfs: fix remote symlinks on V5/CRC filesystems
 +    - ext4: don't retry file block mapping on bigalloc fs with non-extent file
 +    - xfs: don't truncate attribute extents if no extents exist
 +    - NET: ROSE: Don't dereference NULL neighbour pointer.
 +    - netfilter: nf_qeueue: Drop queue entries on nf_unregister_hook
 +    - fs: Fix S_NOSEC handling
 +    - stmmac: troubleshoot unexpected bits in des0 & des1
 +    - ACPI / resources: free memory on error in add_region_before()
 +    - PM / sleep: Increase default DPM watchdog timeout to 60
 +    - ARC: add compiler barrier to LLSC based cmpxchg
 +    - locking,arch,arc: Fold atomic_ops
 +    - ARC: add smp barriers around atomics per Documentation/atomic_ops.txt
 +    - mm: kmemleak: allow safe memory scanning during kmemleak disabling
 +    - dell-laptop: Fix allocating & freeing SMI buffer page
 +    - ALSA: hda - Fix Dock Headphone on Thinkpad X250 seen as a Line Out
 +    - tracing/filter: Do not WARN on operand count going below zero
 +    - tracing/filter: Do not allow infix to exceed end of string
 +    - clocksource: exynos_mct: Avoid blocking calls in the cpu hotplug notifier
 +    - ALSA: hda - Add headset support to Acer Aspire V5
 +    - ALSA: hda - Fix the dock headphone output on Fujitsu Lifebook E780
 +    - agp/intel: Fix typo in needs_ilk_vtd_wa()
 +    - drm/i915: fix backlight after resume on 855gm
 +    - drm/radeon: compute ring fix hibernation (CI GPU family) v2.
 +    - drm/radeon: SDMA fix hibernation (CI GPU family).
 +    - net: mvneta: introduce compatible string "marvell, armada-xp-neta"
 +    - ARM: mvebu: update Ethernet compatible string for Armada XP
 +    - net: mvneta: disable IP checksum with jumbo frames for Armada 370
 +    - crush: fix a bug in tree bucket decode
 +    - rbd: use GFP_NOIO in rbd_obj_request_create()
 +    - arm64: Don't report clear pmds and puds as huge
 +    - fuse: initialize fc->release before calling it
 +    - vfs: Ignore unlocked mounts in fs_fully_visible
 +    - VFS: Introduce inode-getting helpers for layered/unioned fs environments
 +    - fs: Add helper functions for permanently empty directories.
 +    - sysctl: Allow creating permanently empty directories that serve as mountpoints.
 +    - proc: Allow creating permanently empty directories that serve as mount points
 +    - kernfs: Add support for always empty directories.
 +    - sysfs: Add support for permanently empty directories to serve as mount points.
 +    - mnt: Update fs_fully_visible to test for permanently empty directories
 +    - vfs: Remove incorrect debugging WARN in prepend_path
 +    - hwmon: (mcp3021) Fix broken output scaling
 +    - ACPICA: Tables: Enable both 32-bit and 64-bit FACS
 +    - ACPICA: Tables: Fix an issue that FACS initialization is performed twice
 +    - ACPICA: Tables: Enable default 64-bit FADT addresses favor
 +    - KVM: x86: make vapics_in_nmi_mode atomic
 +    - KVM: x86: properly restore LVT0
 +    - KVM: s390: virtio-ccw: don't overwrite config space values
 +    - 9p: forgetting to cancel request on interrupted zero-copy RPC
 +    - clk: Fix JSON output in debugfs
 +    - e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size
 +    - powerpc/pseries: Fix possible leaked device node reference
 +    - clk: ti: dra7-atl-clock: Fix possible ERR_PTR dereference
 +    - ipip: fix one sparse error
 +    - HID: rmi: fix some harmless BIT() mistakes
 +    - HID: i2c-hid: fix harmless test_bit() issue
 +    - pktgen: adjust spacing in proc file interface output
 +    - USB: devio: fix a condition in async_completed()
 +    - tty: remove platform_sysrq_reset_seq
 +    - net/mlx4_core: Enhance the MAD_IFC wrapper to convert VF port to physical
 +    - IB/mlx4: Convert slave port before building address-handle
 +    - ath9k_htc: memory corruption calling set_bit()
 +    - rndis_wlan: harmless issue calling set_bit()
 +    - mtd: dc21285: use raw spinlock functions for nw_gpio_lock
 +    - mac80211: prevent possible crypto tx tailroom corruption
 +    - cfg80211: ignore netif running state when changing iftype
 +    - phy: twl4030-usb: remove incorrect pm_runtime_get_sync() in probe function.
 +    - NFS: Fix size of NFSACL SETACL operations
 +    - Btrfs: lock superblock before remounting for rw subvol
 +    - of: return NUMA_NO_NODE from fallback of_node_to_nid()
 +    - sched/fair: Prevent throttling in early pick_next_task_fair()
 +    - ASoC: imx-wm8962: Add a missing error check
 +    - ACPI / init: Switch over platform to the ACPI mode later
 +    - drm/tegra: dpaux: Fix transfers larger than 4 bytes
 +    - mmc: card: Fixup request missing in mmc_blk_issue_rw_rq
 +    - perf: Fix ring_buffer_attach() RCU sync, again
 +    - watchdog: omap: assert the counter being stopped before reprogramming
 +    - bridge: multicast: restore router configuration on port link down/up
 +    - mm/hugetlb: introduce minimum hugepage order
 +    - security_syslog() should be called once only
 +    - __bitmap_parselist: fix bug in empty string handling
 +    - x86/iosf: Add Kconfig prompt for IOSF_MBI selection
 +    - kvm: x86: fix kvm_apic_has_events to check for NULL pointer
 +    - sparc: Use GFP_ATOMIC in ldc_alloc_exp_dring() as it can be called in softirq context
 +    - fs/ufs: restore s_lock mutex_init()
 +    - ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage
 +    - LZ4 : fix the data abort issue
 +    - lz4: fix system halt at boot kernel on x86_64
 +
 +  [ Ben Hutchings ]
 +  * [x86] vmwgfx: Enable DRM_VMWGFX_FBCON (Closes: #714929)
 +  * [x86] edac: Add edac_ie31200 driver from Linux 3.17 (Closes: #780773)
 +  * [mips*] Correct FP ISA requirements (Closes: #781892)
 +  * Revert "ACPICA: Utilities: split IO address types from data type models."
 +    to avoid ABI change on i386
 +  * libata: add ATA_HORKAGE_NOTRIM
 +  * libata: force disable trim for SuperSSpeed S238
 +  * block: Do a full clone when splitting discard bios (Closes: #793326)
 +  * [armel,sh4] linux-image: Recommend u-boot-tools rather than the obsolete
 +    uboot-mkimage package (Closes: #793608)
 +  * linux-source: Depend on xz-utils, not bzip2 (Closes: #796940)
 +
 +  [ Ian Campbell ]
 +  * [xen] xen-netback: return correct ethtool stats (Closes: #786936)
 +  * of: make sure of_alias is initialized before accessing it.
 +    (Closes: #784053)
 +
 +  [ Uwe Kleine-König ]
 +  * Merge jessie-security changes
 +
 +  [ Aurelien Jarno ]
 +  * [mips*] Correct FP emulation delay slot exception propagation.
 +  * [mips*el/loongson3] Set Loongson 3 ISA to MIPS64R1 to correctly emulate
 +    the corresponding FP instructions.
 +
 + -- Ben Hutchings <ben at decadent.org.uk>  Tue, 26 May 2015 01:42:36 +0100
 +
+ linux (3.16.7-ckt11-1+deb8u4) jessie-security; urgency=medium
+ 
+   * ipv6: addrconf: validate new MTU before applying it (CVE-2015-0272)
+   * virtio-net: drop NETIF_F_FRAGLIST (CVE-2015-5156)
+   * vhost: actually track log eventfd file (CVE-2015-6252)
+   * aufs3: mmap: Fix races in madvise_remove() and sys_msync() (Closes: #796036)
+   * RDS: verify the underlying transport exists before creating a connection
+     (CVE-2015-6937)
+   * vfs: Fix possible escape from mount namespace (CVE-2015-2925):
+     - namei: lift (open-coded) terminate_walk() in follow_dotdot_rcu() into
+       callers
+     - dcache: Handle escaped paths in prepend_path
+     - vfs: Test for and handle paths that are unreachable from their mnt_root
+ 
+  -- Ben Hutchings <ben at decadent.org.uk>  Sat, 19 Sep 2015 15:07:53 +0200
+ 
  linux (3.16.7-ckt11-1+deb8u3) jessie-security; urgency=high
  
    * path_openat(): fix double fput() (CVE-2015-5706)
diff --cc debian/patches/series
index 5366789,d338cb1..7b612a3
--- a/debian/patches/series
+++ b/debian/patches/series
@@@ -630,12 -625,26 +631,19 @@@ debian/mm-fix-pagecache_get_page-abi-ch
  debian/tcp-fix-abi-change-in-3.16.7-ckt7.patch
  debian/usb-avoid-abi-change-in-3.16.7-ckt8.patch
  debian/procfs-avoid-abi-change-in-3.16.7-ckt8.patch
 -bugfix/all/udp-fix-behavior-of-wrong-checksums.patch
 -bugfix/x86/0001-x86-asm-entry-64-Fold-the-test_in_nmi-macro-into-its.patch
 -bugfix/x86/0002-x86-asm-entry-64-Remove-a-redundant-jump.patch
 -bugfix/x86/0004-x86-nmi-Enable-nested-do_nmi-handling-for-64-bit-ker.patch
 -bugfix/x86/0005-x86-nmi-64-Remove-asm-code-that-saves-cr2.patch
 -bugfix/x86/0006-x86-nmi-64-Switch-stacks-on-userspace-NMI-entry.patch
 -bugfix/x86/0007-x86-nmi-64-Improve-nested-NMI-comments.patch
 -bugfix/x86/0008-x86-nmi-64-Reorder-nested-NMI-checks.patch
 -bugfix/x86/0009-x86-nmi-64-Use-DF-to-avoid-userspace-RSP-confusing-n.patch
 -bugfix/all/path_openat-fix-double-fput.patch
 +debian/revert-libata-ignore-spurious-phy-event-on-lpm-polic.patch
 +debian/udp-fix-abi-change-in-3.16.7-ckt14.patch
 +debian/revert-acpica-utilities-split-io-address-types-from-.patch
 +bugfix/all/libata-add-ata_horkage_notrim.patch
 +bugfix/all/libata-force-disable-trim-for-supersspeed-s238.patch
 +bugfix/all/block-do-a-full-clone-when-splitting-discard-bios.patch
  bugfix/all/keys-ensure-we-free-the-assoc-array-edit-if-edit-is-valid.patch
 -bugfix/all/sctp-fix-asconf-list-handling.patch
 -bugfix/x86/kvm-x86-fix-kvm_apic_has_events-to-check-for-null-po.patch
 -bugfix/x86/x86-bpf_jit-fix-compilation-of-large-bpf-programs.patch
  bugfix/all/sg_start_req-make-sure-that-there-s-not-too-many-ele.patch
  bugfix/all/md-use-kzalloc-when-bitmap-is-disabled.patch
+ bugfix/all/ipv6-addrconf-validate-new-MTU-before-applying-it.patch
+ bugfix/all/virtio-net-drop-netif_f_fraglist.patch
+ bugfix/all/vhost-actually-track-log-eventfd-file.patch
+ bugfix/all/rds-verify-the-underlying-transport-exists-before-cr.patch
+ bugfix/all/namei-lift-open-coded-terminate_walk-in-follow_dotdo.patch
+ bugfix/all/dcache-handle-escaped-paths-in-prepend_path.patch
+ bugfix/all/vfs-test-for-and-handle-paths-that-are-unreachable-f.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git



More information about the Kernel-svn-changes mailing list