[linux] branch jessie-security updated (d1dddc0 -> 8d4e375)

debian-kernel at lists.debian.org debian-kernel at lists.debian.org
Sat Apr 30 18:09:34 UTC 2016


This is an automated email from the git hooks/post-receive script.

benh pushed a change to branch jessie-security
in repository linux.

      from  d1dddc0   [x86] USB: usbip: fix potential out-of-bounds write (CVE-2016-3955)
       new  1164e52   netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs (CVE-2016-3134)
       new  8d4e375   ipv4: Don't do expensive useless work during inetdev destroy. (CVE-2016-3156)

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog                                   |   6 +
 ...do-expensive-useless-work-during-inetdev-.patch |  98 +++++++++
 ...tfilter-x_tables-fix-unconditional-helper.patch | 226 +++++++++++++++++++++
 ...-sure-e-next_offset-covers-remaining-blob.patch |  83 ++++++++
 ...r-x_tables-validate-e-target_offset-early.patch | 193 ++++++++++++++++++
 debian/patches/series                              |   4 +
 6 files changed, 610 insertions(+)
 create mode 100644 debian/patches/bugfix/all/ipv4-don-t-do-expensive-useless-work-during-inetdev-.patch
 create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-fix-unconditional-helper.patch
 create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-make-sure-e-next_offset-covers-remaining-blob.patch
 create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-validate-e-target_offset-early.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git



More information about the Kernel-svn-changes mailing list