[linux] branch jessie updated (8d8d24b -> 35fa209)
debian-kernel at lists.debian.org
debian-kernel at lists.debian.org
Sun Jun 26 09:54:06 UTC 2016
This is an automated email from the git hooks/post-receive script.
benh pushed a change to branch jessie
in repository linux.
from 8d8d24b arcmsr: Backport changes up to Linux 4.5 (Closes: #826004)
adds eb8861d Add CVE reference for "AIO: properly check iovec sizes"
adds 083d0e0 CVE-2016-2847 assigned separately
adds d07964d Replace retroactive changes to CVE ID references with [bracketed notes]
adds ed9e01e Add various security fixes
adds bd951e2 Merge tag 'debian/3.16.7-ckt25-1' into jessie-security
adds d0b3ba5 Revert recent radeon revisions raising regressions
adds 111bfd0 Revert "usb: hub: do not clear BOS field during reset device" (Closes: #820176)
adds eebdeae Merge tag 'debian/3.16.7-ckt25-2' into jessie-security
adds d1dddc0 [x86] USB: usbip: fix potential out-of-bounds write (CVE-2016-3955)
adds 1164e52 netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs (CVE-2016-3134)
adds 8d4e375 ipv4: Don't do expensive useless work during inetdev destroy. (CVE-2016-3156)
adds 81968c2 Add fix for CVE-2016-3672
adds 7ce6744 usbnet: Fix possible memory corruption after probe failure (CVE-2016-3951)
adds 1159763 atl2: Disable unimplemented scatter/gather feature (CVE-2016-2117)
adds 9a5ea14 [x86] xen: suppress hugetlbfs in PV guests (CVE-2016-3961)
adds 0da28d4 get_rock_ridge_filename(): handle malformed NM entries (CVE-2016-4913)
adds 82af3cb fs/pnode.c: treat zero mnt_group_id-s as unequal
adds 499c129 propogate_mnt: Handle the first propogated copy being a slave (CVE-2016-4581)
adds 78183cf Delete dummy CVE ID from 'missing CLAC' fix
adds 9c61c1f mm: hugetlb: allow hugepages_supported to be architecture specific
adds 7d17432 USB: usbfs: fix potential infoleak in devio (CVE-2016-4482)
adds 912af45 ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (CVE-2016-4569)
adds 17633a8 ALSA: timer: Fix leak in events via snd_timer_user_ccallback or snd_timer_user_tinterrupt (CVE-2016-4578)
adds b7a433d tipc: fix an infoleak in tipc_nl_compat_link_dump (CVE-2016-5243)
adds d46e7e5 Fix changelog entry for CVE-2016-5243
adds 0249fe0 rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244)
adds 944b91d ecryptfs: forbid opening files without mmap handler (CVE-2016-1583)
adds 22d0a6d Add USB descriptor parsing fixes
adds 7972ce8 mm: migrate dirty page without clear_page_dirty_for_io etc (CVE-2016-3070)
adds 3c3898e Add networking information leak fixes
adds 3d87ee5 IB/security: Restrict use of the write() interface (CVE-2016-4565)
adds c229ea2 ppp: take reference on channels netns (CVE-2016-4805)
adds d7574c1 KEYS: potential uninitialized variable (CVE-2016-4470)
adds 6f66940 netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
adds 6c9fbc1 nfsd: check permissions when setting ACLs (CVE-2016-1237)
adds 69680fa Ignore ABI change in x_tables
adds 04444bb migrate: Fix ABI change
adds d82dcef Prepare to release linux (3.16.7-ckt25-2+deb8u1).
adds dca4276 Fix backport of "netfilter: x_tables: validate targets of jumps"
adds 234044f netfilter: ensure number of counters is >0 in do_replace()
adds 9d2d42e Prepare to release linux (3.16.7-ckt25-2+deb8u2).
new 35fa209 Merge branch 'jessie-security' into jessie
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
debian/changelog | 131 ++--
debian/config/defines | 1 +
...fix-leak-in-events-via-snd_timer_user_cca.patch | 33 +
...fix-leak-in-events-via-snd_timer_user_tin.patch | 33 +
...imer-fix-leak-in-sndrv_timer_ioctl_params.patch | 33 +
...cryptfs-fix-handling-of-directory-opening.patch | 139 ++++
...forbid-opening-files-without-mmap-handler.patch | 54 ++
.../keys-potential-uninitialized-variable.patch | 86 +++
...rp_tables-simplify-translate_compat_table.patch | 208 ++++++
...nsure-number-of-counters-is-0-in-do_repla.patch | 120 ++++
...p6_tables-simplify-translate_compat_table.patch | 185 +++++
...p_tables-simplify-translate_compat_table-.patch | 184 +++++
..._tables-add-and-use-xt_check_entry_offset.patch | 151 ++++
..._tables-add-compat-version-of-xt_check_en.patch | 105 +++
...ilter-x_tables-assert-minimum-target-size.patch | 25 +
...er-x_tables-check-for-bogus-target-offset.patch | 164 +++++
...r-x_tables-check-standard-target-size-too.patch | 60 ++
..._tables-do-compat-validation-via-translat.patch | 781 +++++++++++++++++++++
..._tables-don-t-move-to-non-existent-next-r.patch | 100 +++
..._tables-don-t-reject-valid-target-size-on.patch | 54 ++
..._tables-introduce-and-use-xt_copy_counter.patch | 331 +++++++++
...etfilter-x_tables-kill-check_entry-helper.patch | 149 ++++
..._tables-validate-all-offsets-and-sizes-in.patch | 137 ++++
...filter-x_tables-validate-targets-of-jumps.patch | 131 ++++
..._tables-xt_compat_match_from_user-doesn-t.patch | 234 ++++++
.../nfsd-check-permissions-when-setting-ACLs.patch | 146 ++++
.../bugfix/all/posix_acl-Add-set_posix_acl.patch | 82 +++
.../rds-fix-an-infoleak-in-rds_inc_info_copy.patch | 31 +
...x-an-infoleak-in-tipc_nl_compat_link_dump.patch | 26 +
...usb-usbfs-fix-potential-infoleak-in-devio.patch | 41 ++
debian/patches/series | 30 +
31 files changed, 3942 insertions(+), 43 deletions(-)
create mode 100644 debian/patches/bugfix/all/alsa-timer-fix-leak-in-events-via-snd_timer_user_cca.patch
create mode 100644 debian/patches/bugfix/all/alsa-timer-fix-leak-in-events-via-snd_timer_user_tin.patch
create mode 100644 debian/patches/bugfix/all/alsa-timer-fix-leak-in-sndrv_timer_ioctl_params.patch
create mode 100644 debian/patches/bugfix/all/ecryptfs-fix-handling-of-directory-opening.patch
create mode 100644 debian/patches/bugfix/all/ecryptfs-forbid-opening-files-without-mmap-handler.patch
create mode 100644 debian/patches/bugfix/all/keys-potential-uninitialized-variable.patch
create mode 100644 debian/patches/bugfix/all/netfilter-arp_tables-simplify-translate_compat_table.patch
create mode 100644 debian/patches/bugfix/all/netfilter-ensure-number-of-counters-is-0-in-do_repla.patch
create mode 100644 debian/patches/bugfix/all/netfilter-ip6_tables-simplify-translate_compat_table.patch
create mode 100644 debian/patches/bugfix/all/netfilter-ip_tables-simplify-translate_compat_table-.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-add-and-use-xt_check_entry_offset.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-add-compat-version-of-xt_check_en.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-assert-minimum-target-size.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-check-for-bogus-target-offset.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-check-standard-target-size-too.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-do-compat-validation-via-translat.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-don-t-move-to-non-existent-next-r.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-don-t-reject-valid-target-size-on.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-introduce-and-use-xt_copy_counter.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-kill-check_entry-helper.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-validate-all-offsets-and-sizes-in.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-validate-targets-of-jumps.patch
create mode 100644 debian/patches/bugfix/all/netfilter-x_tables-xt_compat_match_from_user-doesn-t.patch
create mode 100644 debian/patches/bugfix/all/nfsd-check-permissions-when-setting-ACLs.patch
create mode 100644 debian/patches/bugfix/all/posix_acl-Add-set_posix_acl.patch
create mode 100644 debian/patches/bugfix/all/rds-fix-an-infoleak-in-rds_inc_info_copy.patch
create mode 100644 debian/patches/bugfix/all/tipc-fix-an-infoleak-in-tipc_nl_compat_link_dump.patch
create mode 100644 debian/patches/bugfix/all/usb-usbfs-fix-potential-infoleak-in-devio.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git
More information about the Kernel-svn-changes
mailing list