[linux] 01/01: Merge tag 'debian/3.16.39-1+deb8u1' into wheezy-backports

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a commit to branch wheezy-backports
in repository linux.

commit 5c867245f3f2c3022482ac4bdb02fed4e3353ad6
Merge: 65937e0 5d73ae1
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Fri Feb 24 18:50:51 2017 +0000

    Merge tag 'debian/3.16.39-1+deb8u1' into wheezy-backports

 debian/changelog                                   |  36 ++
 ...reeing-skb-too-early-for-IPV6_RECVPKTINFO.patch |  47 ++
 .../fbdev-color-map-copying-bounds-checking.patch  |  80 ++++
 .../all/ip6_gre-fix-ip6gre_err-invalid-reads.patch |  98 ++++
 ...-skb-dst-around-in-presence-of-ip-options.patch |  43 ++
 .../bugfix/all/perf-Fix-event-ctx-locking.patch    | 501 +++++++++++++++++++++
 ...ix-concurrent-sys_perf_event_open-vs.-mov.patch | 152 +++++++
 .../bugfix/all/perf-do-not-double-free.patch       |  47 ++
 .../selinux-fix-off-by-one-in-setprocattr.patch    |  61 +++
 ...-added-by-grab_header-in-proc_sys_readdir.patch |  83 ++++
 ...pfs-clear-s_isgid-when-setting-posix-acls.patch |  41 ++
 ...-kl5kusb105-fix-line-state-error-handling.patch |  37 ++
 .../kvm-fix-page-struct-leak-in-handle_vmon.patch  |  40 ++
 ...x86-fix-emulation-of-mov-ss-null-selector.patch | 104 +++++
 .../kvm-x86-introduce-segmented_write_std.patch    |  59 +++
 debian/patches/series                              |  14 +
 16 files changed, 1443 insertions(+)

diff --cc debian/changelog
index b680ace,af26780..a408f51
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,15 -1,27 +1,51 @@@
++linux (3.16.39-1+deb8u1~bpo70+1) wheezy-backports; urgency=medium
++
++  * Rebuild for wheezy:
++    - Disable architectures that weren't part of wheezy
++    - Use gcc-4.6 for all architectures
++    - Change ABI number to 0.bpo.4
++    - [arm] btrfs: Work around bug in gcc-4.6 (fixes FTBFS)
++    - linux-image: Depend on initramfs-tools without any alternatives, so
++      that neither apt nor aptitude will automatically switch to dracut
++
++ -- Ben Hutchings <ben at decadent.org.uk>  Fri, 24 Feb 2017 16:38:59 +0000
++
+ linux (3.16.39-1+deb8u1) jessie-security; urgency=high
+ 
+   [ Salvatore Bonaccorso ]
+   * perf: Fix event->ctx locking (CVE-2016-6786 CVE-2016-6787)
+   * perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
+     (CVE-2017-6001)
+   * dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074)
+ 
+   [ Ben Hutchings ]
+   * perf: Do not double free (dependency of fix for CVE-2017-6001)
+   * fbdev: color map copying bounds checking (CVE-2016-8405)
+   * sysctl: Drop reference added by grab_header in proc_sys_readdir
+     (CVE-2016-9191)
+   * [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
+   * [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
+   * selinux: fix off-by-one in setprocattr (CVE-2017-2618)
+   * USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
+   * tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
+   * ip6_gre: fix ip6gre_err() invalid reads (CVE-2017-5897)
+   * [x86] kvm: fix page struct leak in handle_vmon (CVE-2017-2596)
+   * ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970)
+ 
+  -- Ben Hutchings <ben at decadent.org.uk>  Wed, 22 Feb 2017 02:43:36 +0000
+ 
 +linux (3.16.39-1~bpo70+1) wheezy-backports; urgency=medium
 +
 +  * Rebuild for wheezy:
 +    - Disable architectures that weren't part of wheezy
 +    - Use gcc-4.6 for all architectures
 +    - Change ABI number to 0.bpo.4
 +    - [arm] btrfs: Work around bug in gcc-4.6 (fixes FTBFS)
 +    - linux-image: Depend on initramfs-tools without any alternatives, so
 +      that neither apt nor aptitude will automatically switch to dracut
 +
 + -- Ben Hutchings <ben at decadent.org.uk>  Thu, 12 Jan 2017 23:35:51 +0000
 +
  linux (3.16.39-1) jessie; urgency=medium
  
    * New upstream stable update:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git