[linux] branch jessie-security updated (4013919 -> de45963)

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a change to branch jessie-security
in repository linux.

      from  4013919   perf: Do not double free
       new  62b920d   fbdev: color map copying bounds checking (CVE-2016-8405)
       new  6e49ff2   sysctl: Drop reference added by grab_header in proc_sys_readdir (CVE-2016-919)
       new  c448fa9   [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
       new  e8540d0   [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
       new  4acd7cd   selinux: fix off-by-one in setprocattr (CVE-2017-2618)
       new  1fecc8f   USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
       new  8fb318b   tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
       new  de45963   ip6_gre: fix ip6gre_err() invalid reads (CVE-2017-5897)

The 8 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog                                   |   9 ++
 .../fbdev-color-map-copying-bounds-checking.patch  |  80 ++++++++++++++++
 .../all/ip6_gre-fix-ip6gre_err-invalid-reads.patch |  88 +++++++++++++++++
 .../selinux-fix-off-by-one-in-setprocattr.patch    |  61 ++++++++++++
 ...-added-by-grab_header-in-proc_sys_readdir.patch |  83 ++++++++++++++++
 ...pfs-clear-s_isgid-when-setting-posix-acls.patch |  41 ++++++++
 ...-kl5kusb105-fix-line-state-error-handling.patch |  37 ++++++++
 ...x86-fix-emulation-of-mov-ss-null-selector.patch | 104 +++++++++++++++++++++
 .../kvm-x86-introduce-segmented_write_std.patch    |  59 ++++++++++++
 debian/patches/series                              |   8 ++
 10 files changed, 570 insertions(+)
 create mode 100644 debian/patches/bugfix/all/fbdev-color-map-copying-bounds-checking.patch
 create mode 100644 debian/patches/bugfix/all/ip6_gre-fix-ip6gre_err-invalid-reads.patch
 create mode 100644 debian/patches/bugfix/all/selinux-fix-off-by-one-in-setprocattr.patch
 create mode 100644 debian/patches/bugfix/all/sysctl-drop-reference-added-by-grab_header-in-proc_sys_readdir.patch
 create mode 100644 debian/patches/bugfix/all/tmpfs-clear-s_isgid-when-setting-posix-acls.patch
 create mode 100644 debian/patches/bugfix/all/usb-serial-kl5kusb105-fix-line-state-error-handling.patch
 create mode 100644 debian/patches/bugfix/x86/kvm-x86-fix-emulation-of-mov-ss-null-selector.patch
 create mode 100644 debian/patches/bugfix/x86/kvm-x86-introduce-segmented_write_std.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git