[linux] annotated tag debian/3.16.39-1 created (now 22fe9fe)

debian-kernel at lists.debian.org debian-kernel at lists.debian.org
Sat Dec 31 18:54:06 UTC 2016


This is an automated email from the git hooks/post-receive script.

benh pushed a change to annotated tag debian/3.16.39-1
in repository linux.

        at  22fe9fe   (tag)
   tagging  6b4dd34690da27e7ca76e713294d62a00cbd721d (commit)
  replaces  debian/3.16.36-1+deb8u2
 tagged by  Ben Hutchings
        on  Sat Dec 31 18:53:30 2016 +0000

- Log -----------------------------------------------------------------
Release linux (3.16.39-1).
-----BEGIN PGP SIGNATURE-----
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=KUDy
-----END PGP SIGNATURE-----

Aurelien Jarno (1):
      [mips*] Fix ptrace handling of any syscalls returning ENOSYS.

Ben Hutchings (32):
      Merge tag 'debian/3.16.36-1+deb8u2' into jessie
      [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575)
      hwrng: Add chaoskey driver, backported from 4.8 (Closes: #839616)
      Update to 3.16.39
      Revert "ecryptfs: forbid opening files without mmap handler", redundant with upstream fixes
      fs: Move procfs/ecryptfs stacking check into ecryptfs, to avoid ABI change
      Fix/ignore/revert (as appropriate) ABI changes in 3.16.37 and 3.16.39
      Fix backport of "fs: Give dentry to inode_change_ok() instead of inode" in fuse, xfs
      Note more CVEs fixed in upstream stable updates
      sg: Fix double-free when drives detach during SG_IO (CVE-2015-8962)
      perf: Fix race in swevent hash (CVE-2015-8963)
      tty: Prevent ldisc drivers from re-using stale tty fields (CVE-2015-8964)
      usb: gadget: f_fs: Fix use-after-free (CVE-2016-7912)
      HID: core: prevent out-of-bound readings (CVE-2016-7915)
      netfilter: nfnetlink: correctly validate length of batch messages (CVE-2016-7917)
      net: ping: check minimum size on ICMP header length (CVE-2016-8399)
      net: Limit sk_filter trim to payload
      mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (CVE-2016-8650)
      packet: fix race condition in packet_set_ring (CVE-2016-8655)
      [x86] Fix potential infoleak in older kernels (CVE-2016-9178)
      sctp: validate chunk len before actually using it (CVE-2016-9555)
      sg_write()/bsg_write() is not fit to be called under KERNEL_DS (CVE-2016-9576)
      [x86] KVM: drop error recovery in em_jmp_far and em_ret_far (CVE-2016-9756)
      net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793)
      ALSA: pcm : Call kill_fasync() in stream lock (CVE-2016-9794)
      Note that CVE-2016-9806 was fixed in 3.16.37
      security,perf: Allow unprivileged use of perf_event_open to be disabled
      spi-nor: Add support for n25q256a11 SPI flash device (Closes: #843650)
      xen-blkfront: fix accounting of reqs when migrating (Closes: #843715)
      Note that #834513 was (probably) fixed in 3.16.37
      Note that CVE-2016-10088 is fixed along with CVE-2016-9576
      Prepare to release linux (3.16.39-1).

Salvatore Bonaccorso (3):
      KVM: VMX: Fix host initiated access to guest MSR_TSC_AUX
      Merge tag 'debian/3.16.36-1+deb8u1' into jessie
      [x86] KVM: pass host_initiated to functions that read MSRs

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  22fa415   Note that CVE-2016-10088 is fixed along with CVE-2016-9576
       new  6b4dd34   Prepare to release linux (3.16.39-1).

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git



More information about the Kernel-svn-changes mailing list