[linux] annotated tag debian/3.16.39-1+deb8u1_bpo70+1 created (now 32c6ab6)

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a change to annotated tag debian/3.16.39-1+deb8u1_bpo70+1
in repository linux.

        at  32c6ab6   (tag)
   tagging  5c867245f3f2c3022482ac4bdb02fed4e3353ad6 (commit)
  replaces  debian/3.16.39-1_bpo70+1
 tagged by  Ben Hutchings
        on  Fri Feb 24 18:50:58 2017 +0000

- Log -----------------------------------------------------------------
Release linux (3.16.39-1+deb8u1~bpo70+1).
-----BEGIN PGP SIGNATURE-----
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=uA+f
-----END PGP SIGNATURE-----

Ben Hutchings (26):
      Add fix for CVE-2015-1350
      [arm64] perf: reject groups spanning multiple HW PMUs (CVE-2015-8955)
      Add fix for CVE-2016-5412
      posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097)
      block: fix use-after-free in seq file (CVE-2016-7910)
      block: fix use-after-free in sys_ioprio_get() (CVE-2016-7911)
      firewire: net: guard against rx buffer overflows (CVE-2016-8633)
      brcmfmac: avoid potential stack overflow in brcmf_cfg80211_start_ap() (CVE-2016-8658)
      vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083, CVE-2016-9084)
      Merge tag 'debian/3.16.39-1' into jessie-security
      Fix reference leak in "perf/core: Fix concurrent sys_perf_event_open() ..."
      perf: Do not double free
      fbdev: color map copying bounds checking (CVE-2016-8405)
      sysctl: Drop reference added by grab_header in proc_sys_readdir (CVE-2016-919)
      [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
      [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
      selinux: fix off-by-one in setprocattr (CVE-2017-2618)
      USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
      tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
      ip6_gre: fix ip6gre_err() invalid reads (CVE-2017-5897)
      [x86] kvm: fix page struct leak in handle_vmon (CVE-2017-2596)
      ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970)
      Fix missing #include in "ip6_gre: fix ip6gre_err() invalid reads"
      Revert "sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986)"
      Prepare to release linux (3.16.39-1+deb8u1).
      Merge tag 'debian/3.16.39-1+deb8u1' into wheezy-backports

Salvatore Bonaccorso (6):
      perf: Fix event->ctx locking (CVE-2016-6786)
      perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race (CVE-2017-6001)
      Add missing CVE id for CVE-2016-6787
      dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074)
      sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986)
      Fix typo in CVE id for CVE-2016-9191

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  5c86724   Merge tag 'debian/3.16.39-1+deb8u1' into wheezy-backports

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git