[linux] branch jessie-security updated (55661c9 -> 787ab7e)

debian-kernel at lists.debian.org debian-kernel at lists.debian.org
Fri Jan 5 16:06:52 UTC 2018


This is an automated email from the git hooks/post-receive script.

benh pushed a change to branch jessie-security
in repository linux.

      from  55661c9   [amd64] mm: revert ELF_ET_DYN_BASE base changes (fixes regression of ASan)
      adds  8f2c169   Update to 3.16.47
      adds  8e26117   Merge tag 'debian/3.16.43-2+deb8u4' into jessie
      adds  d8ab9cf   Merge tag 'debian/3.16.43-2+deb8u5' into jessie
      adds  11d2358   Update to 3.16.48
      adds  466b71b   Fix regressions caused by fix for CVE-2016-7097 (Closes: #873026)
      adds  d311adb   vfs: avoid creation of inode number 0 in get_next_ino (Closes: #876762)
      adds  bd69954   Prepare to release linux (3.16.48-1).
      adds  b14f353   KEYS: Simplify KEYRING_SEARCH_{NO,DO}_STATE_CHECK flags
      adds  0389be3   [s390x] qeth: Ignore ABI changes
      adds  3f58d23   Update to 3.16.51
      adds  92584b1   Note that upstream changes (probably) close bug #865416
      adds  ce399c0   mm/mmap.c: expand_downwards: don't require the gap if !vm_prev
      adds  ee3ab00   [x86] mmap: Add an exception to the stack gap for Hotspot JVM compatibility
      adds  8475bc9   mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (CVE-2017-1000405)
      adds  4c4da6d   Prepare to release linux (3.16.51-1).
      adds  4480189   Fix duplicated comment opener in "dm: Avoid ABI change in 3.16.50"
      adds  0fd5fda   [mips*] inst: Avoid ABI change in 3.16.51
      adds  67624fc   sched/topology: Add missing pieces of the fixes included in 3.16.49
      adds  787ab7e   Prepare to release linux (3.16.51-3).

No new revisions were added by this update.

Summary of changes:
 debian/changelog                                   | 1052 ++++++++++++++++++++
 debian/config/defines                              |   12 +
 ...fy-KEYRING_SEARCH_-NO-DO-_STATE_CHECK-fla.patch |   96 ++
 ...remove-broken-fallback-for-missing-ctrl-a.patch |   57 --
 ...-timer-fix-missing-queue-indices-reset-at.patch |   52 -
 ...lsa-timer-fix-race-between-read-and-ioctl.patch |   69 --
 ...roperly-check-l2cap-config-option-output-.patch |  353 -------
 ...x-possible-buffer-overflow-in-brcmf_cfg80.patch |   42 -
 ...fix-possible-integer-overflow-in-lp_setup.patch |   39 -
 ...ash-fix-einprogress-notification-callback.patch |  226 -----
 ...cp-tcp-do-not-inherit-mc_list-from-parent.patch |   37 -
 .../patches/bugfix/all/dentry-name-snapshots.patch |  233 -----
 ...x-fencepost-in-s_first_meta_bg-validation.patch |   30 -
 .../fs-exec.c-account-for-argv-envp-pointers.patch |   91 --
 ...overflow-of-offset-in-ip6_find_1stfragopt.patch |   55 -
 ...ip6_find_1stfragopt-return-value-properly.patch |   85 --
 ...p-do-not-inherit-ipv6_mc_list-from-parent.patch |   60 --
 .../all/ipv6-fix-leak-in-ipv6_gso_segment.patch    |   30 -
 ...-out-of-bound-writes-in-__ip6_append_data.patch |   62 --
 ...nt-overrun-when-parsing-v6-header-options.patch |  221 ----
 ...-use-consistent-conditional-judgement-for.patch |   38 -
 ...andle-errors-reported-by-xfrm6_find_1stfr.patch |   40 -
 .../ipx-call-ipxitf_put-in-ioctl-error-path.patch  |   36 -
 ...ow-keyrings-beginning-with-.-to-be-joined.patch |   76 --
 ...yctl_set_reqkey_keyring-to-not-leak-threa.patch |  174 ----
 ...ate-eperm-for-a-key-type-name-beginning-w.patch |   41 -
 ...t_key-should-reget-expired-keys-rather-th.patch |    8 +-
 ...special-dot-prefixed-keyring-name-bug-fix.patch |   50 -
 .../media-dvb-usb-v2-avoid-use-after-free.patch    |   55 -
 ...mm-fix-new-crash-in-unmapped_area_topdown.patch |   46 -
 ...ory.c-fix-up-mm-huge_memory.c-respect-fol.patch |   59 --
 .../mm-larger-stack-guard-gap-between-vmas.patch   |  807 ---------------
 ...y.c-fix-error-handling-in-set_mempolicy-a.patch |   72 --
 ...xpand_downwards-don-t-require-the-gap-if-.patch |   56 ++
 ...ot-make-page-table-dirty-unconditionally-.patch |   52 +
 ...eue-fix-a-use-after-free-in-sys_mq_notify.patch |   50 -
 ...-fix-overflow-in-check-for-priv-area-size.patch |   35 -
 ...ket-fix-overflow-in-check-for-tp_frame_nr.patch |   32 -
 ...cket-fix-overflow-in-check-for-tp_reserve.patch |   28 -
 ...sd-check-for-oversized-nfsv2-v3-arguments.patch |   99 --
 ...icter-decoding-of-write-like-nfsv2-v3-ops.patch |   56 --
 ...sd4-minor-nfsv2-v3-write-decoding-cleanup.patch |   79 --
 ...-the-required-netlink-attributes-presence.patch |   36 -
 ...et-fix-tp_reserve-race-in-packet_set_ring.patch |   46 -
 .../bugfix/all/ping-implement-proper-locking.patch |   49 -
 ...e-wrt-a-process-requires-mapped-uids-gids.patch |   10 +-
 ...ore-Fix-regualtor_ena_gpio_free-not-to-ac.patch |   27 -
 ...everal-cases-where-a-padded-len-isn-t-che.patch |  207 ----
 .../sanitize-move_pages-permission-checks.patch    |   73 --
 .../sched-topology-optimize-build_group_mask.patch |   57 ++
 .../sched-topology-remove-force_sd_overlap.patch   |   48 +
 ...ology-simplify-build_overlap_sched_groups.patch |   61 ++
 ...-iscsi_if_rx-doesn-t-parse-nlmsg-properly.patch |   55 -
 ...xxx-fix-an-integer-overflow-in-sysfs-code.patch |   58 --
 ...-inherit-ipv6_-mc-ac-fl-_list-from-parent.patch |   29 -
 ...alize-rcv_mss-to-tcp_min_mss-instead-of-0.patch |   35 -
 ...protect-the-might-cancel-mechanism-proper.patch |   91 --
 ...-strlcpy-instead-of-strcpy-in-__trace_fin.patch |   34 -
 ...p-consistently-apply-ufo-or-fragmentation.patch |   88 --
 .../usb-iowarrior-fix-null-deref-at-probe.patch    |   52 -
 ...io_ti-fix-information-leak-in-completion-.patch |   31 -
 ...erial-omninet-fix-reference-leaks-at-open.patch |   33 -
 ...reation-of-inode-number-0-in-get_next_ino.patch |   42 +
 ...-aty-do-not-leak-uninitialized-padding-in.patch |   30 -
 ...k-don-t-leak-stack-data-via-response-ring.patch |  130 ---
 .../bugfix/all/xen-fix-bio-vec-merging.patch       |   61 --
 .../xfrm-policy-check-policy-direction-value.patch |   40 -
 ...e-xfrm_msg_newae-incoming-esn-size-harder.patch |   34 -
 ..._newae-xfrma_replay_esn_val-replay_window.patch |   45 -
 ...realtime_inode-should-be-false-if-no-rt-d.patch |   68 --
 ...s-host_initiated-to-functions-that-read-M.patch |   27 +-
 ...x-Make-sure-backup_handle-is-always-valid.patch |   48 -
 ...eger-overflow-in-vmw_surface_define_ioctl.patch |   35 -
 ...limit-the-number-of-mip-levels-in-vmw_gb_.patch |   33 -
 ...don-t-allow-l2-to-access-the-hardware-cr8.patch |   35 -
 .../kvm-x86-fix-singlestepping-over-syscall.patch  |  128 ---
 ...mm-Tighten-x86-dev-mem-with-zeroing-reads.patch |  212 ----
 ...xception-to-the-stack-gap-for-hotspot-jvm.patch |   45 +
 ...p-remember-the-map_fixed-flag-as-vm_fixed.patch |   32 +
 ...r-dereference-in-vmw_surface_define_ioctl.patch |   34 -
 .../cpumask-avoid-abi-change-in-3.16.50.patch      |   24 +
 .../debian/dm-avoid-abi-change-in-3.16.50.patch    |   29 +
 .../debian/gpio-avoid-abi-change-in-3.16.50.patch  |   27 +
 .../inet_frag-limit-abi-change-in-3.16.51.patch    |   62 ++
 .../ip6_fib-avoid-abi-change-in-3.16.50.patch      |   23 +
 .../ip_fib-avoid-abi-change-in-3.16.50.patch       |   30 +
 .../mips-inst-avoid-abi-change-in-3.16.51.patch    |   25 +
 .../debian/mm-avoid-abi-change-in-3.16.50.patch    |   41 +
 .../ptrace-avoid-abi-change-in-3.16.48.patch       |   24 +
 ...efine-at_vector_size_arch-for-arch_dlinfo.patch |    6 +-
 ...ror-count-medium-access-timeout-only-once.patch |  121 +++
 .../s390-mm-avoid-abi-change-in-3.16.51.patch      |   74 ++
 .../debian/sched-avoid-abi-change-in-3.16.49.patch |   48 +
 .../debian/scsi-fix-abi-change-in-3.16.37.patch    |   21 +-
 ...ge-for-ttm_ref_object_add-require_existed.patch |   41 +
 debian/patches/debian/version.patch                |   14 +-
 .../debian/xfrm-avoid-abi-change-in-3.16.48.patch  |   25 +
 ...-Implement-change_queue_depth-for-virtscs.patch |    8 +-
 debian/patches/series                              |   89 +-
 99 files changed, 2219 insertions(+), 5603 deletions(-)
 create mode 100644 debian/patches/bugfix/all/KEYS-Simplify-KEYRING_SEARCH_-NO-DO-_STATE_CHECK-fla.patch
 delete mode 100644 debian/patches/bugfix/all/aic94xx-remove-broken-fallback-for-missing-ctrl-a.patch
 delete mode 100644 debian/patches/bugfix/all/alsa-timer-fix-missing-queue-indices-reset-at.patch
 delete mode 100644 debian/patches/bugfix/all/alsa-timer-fix-race-between-read-and-ioctl.patch
 delete mode 100644 debian/patches/bugfix/all/bluetooth-properly-check-l2cap-config-option-output-.patch
 delete mode 100644 debian/patches/bugfix/all/brcmfmac-fix-possible-buffer-overflow-in-brcmf_cfg80.patch
 delete mode 100644 debian/patches/bugfix/all/char-lp-fix-possible-integer-overflow-in-lp_setup.patch
 delete mode 100644 debian/patches/bugfix/all/crypto-ahash-fix-einprogress-notification-callback.patch
 delete mode 100644 debian/patches/bugfix/all/dccp-tcp-do-not-inherit-mc_list-from-parent.patch
 delete mode 100644 debian/patches/bugfix/all/dentry-name-snapshots.patch
 delete mode 100644 debian/patches/bugfix/all/ext4-fix-fencepost-in-s_first_meta_bg-validation.patch
 delete mode 100644 debian/patches/bugfix/all/fs-exec.c-account-for-argv-envp-pointers.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-avoid-overflow-of-offset-in-ip6_find_1stfragopt.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-check-ip6_find_1stfragopt-return-value-properly.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-dccp-do-not-inherit-ipv6_mc_list-from-parent.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-fix-leak-in-ipv6_gso_segment.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-fix-out-of-bound-writes-in-__ip6_append_data.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-prevent-overrun-when-parsing-v6-header-options.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-should-use-consistent-conditional-judgement-for.patch
 delete mode 100644 debian/patches/bugfix/all/ipv6-xfrm-handle-errors-reported-by-xfrm6_find_1stfr.patch
 delete mode 100644 debian/patches/bugfix/all/ipx-call-ipxitf_put-in-ioctl-error-path.patch
 delete mode 100644 debian/patches/bugfix/all/keys-disallow-keyrings-beginning-with-.-to-be-joined.patch
 delete mode 100644 debian/patches/bugfix/all/keys-fix-keyctl_set_reqkey_keyring-to-not-leak-threa.patch
 delete mode 100644 debian/patches/bugfix/all/keys-reinstate-eperm-for-a-key-type-name-beginning-w.patch
 delete mode 100644 debian/patches/bugfix/all/keys-special-dot-prefixed-keyring-name-bug-fix.patch
 delete mode 100644 debian/patches/bugfix/all/media-dvb-usb-v2-avoid-use-after-free.patch
 delete mode 100644 debian/patches/bugfix/all/mm-fix-new-crash-in-unmapped_area_topdown.patch
 delete mode 100644 debian/patches/bugfix/all/mm-huge_memory.c-fix-up-mm-huge_memory.c-respect-fol.patch
 delete mode 100644 debian/patches/bugfix/all/mm-larger-stack-guard-gap-between-vmas.patch
 delete mode 100644 debian/patches/bugfix/all/mm-mempolicy.c-fix-error-handling-in-set_mempolicy-a.patch
 create mode 100644 debian/patches/bugfix/all/mm-mmap.c-expand_downwards-don-t-require-the-gap-if-.patch
 create mode 100644 debian/patches/bugfix/all/mm-thp-Do-not-make-page-table-dirty-unconditionally-.patch
 delete mode 100644 debian/patches/bugfix/all/mqueue-fix-a-use-after-free-in-sys_mq_notify.patch
 delete mode 100644 debian/patches/bugfix/all/net-packet-fix-overflow-in-check-for-priv-area-size.patch
 delete mode 100644 debian/patches/bugfix/all/net-packet-fix-overflow-in-check-for-tp_frame_nr.patch
 delete mode 100644 debian/patches/bugfix/all/net-packet-fix-overflow-in-check-for-tp_reserve.patch
 delete mode 100644 debian/patches/bugfix/all/nfsd-check-for-oversized-nfsv2-v3-arguments.patch
 delete mode 100644 debian/patches/bugfix/all/nfsd-stricter-decoding-of-write-like-nfsv2-v3-ops.patch
 delete mode 100644 debian/patches/bugfix/all/nfsd4-minor-nfsv2-v3-write-decoding-cleanup.patch
 delete mode 100644 debian/patches/bugfix/all/nl80211-check-for-the-required-netlink-attributes-presence.patch
 delete mode 100644 debian/patches/bugfix/all/packet-fix-tp_reserve-race-in-packet_set_ring.patch
 delete mode 100644 debian/patches/bugfix/all/ping-implement-proper-locking.patch
 delete mode 100644 debian/patches/bugfix/all/regulator-core-Fix-regualtor_ena_gpio_free-not-to-ac.patch
 delete mode 100644 debian/patches/bugfix/all/rxrpc-Fix-several-cases-where-a-padded-len-isn-t-che.patch
 delete mode 100644 debian/patches/bugfix/all/sanitize-move_pages-permission-checks.patch
 create mode 100644 debian/patches/bugfix/all/sched-topology-optimize-build_group_mask.patch
 create mode 100644 debian/patches/bugfix/all/sched-topology-remove-force_sd_overlap.patch
 create mode 100644 debian/patches/bugfix/all/sched-topology-simplify-build_overlap_sched_groups.patch
 delete mode 100644 debian/patches/bugfix/all/scsi-fix-the-issue-that-iscsi_if_rx-doesn-t-parse-nlmsg-properly.patch
 delete mode 100644 debian/patches/bugfix/all/scsi-qla2xxx-fix-an-integer-overflow-in-sysfs-code.patch
 delete mode 100644 debian/patches/bugfix/all/sctp-do-not-inherit-ipv6_-mc-ac-fl-_list-from-parent.patch
 delete mode 100644 debian/patches/bugfix/all/tcp-initialize-rcv_mss-to-tcp_min_mss-instead-of-0.patch
 delete mode 100644 debian/patches/bugfix/all/timerfd-protect-the-might-cancel-mechanism-proper.patch
 delete mode 100644 debian/patches/bugfix/all/tracing-use-strlcpy-instead-of-strcpy-in-__trace_fin.patch
 delete mode 100644 debian/patches/bugfix/all/udp-consistently-apply-ufo-or-fragmentation.patch
 delete mode 100644 debian/patches/bugfix/all/usb-iowarrior-fix-null-deref-at-probe.patch
 delete mode 100644 debian/patches/bugfix/all/usb-serial-io_ti-fix-information-leak-in-completion-.patch
 delete mode 100644 debian/patches/bugfix/all/usb-serial-omninet-fix-reference-leaks-at-open.patch
 create mode 100644 debian/patches/bugfix/all/vfs-avoid-creation-of-inode-number-0-in-get_next_ino.patch
 delete mode 100644 debian/patches/bugfix/all/video-fbdev-aty-do-not-leak-uninitialized-padding-in.patch
 delete mode 100644 debian/patches/bugfix/all/xen-blkback-don-t-leak-stack-data-via-response-ring.patch
 delete mode 100644 debian/patches/bugfix/all/xen-fix-bio-vec-merging.patch
 delete mode 100644 debian/patches/bugfix/all/xfrm-policy-check-policy-direction-value.patch
 delete mode 100644 debian/patches/bugfix/all/xfrm_user-validate-xfrm_msg_newae-incoming-esn-size-harder.patch
 delete mode 100644 debian/patches/bugfix/all/xfrm_user-validate-xfrm_msg_newae-xfrma_replay_esn_val-replay_window.patch
 delete mode 100644 debian/patches/bugfix/all/xfs-xfs_is_realtime_inode-should-be-false-if-no-rt-d.patch
 delete mode 100644 debian/patches/bugfix/x86/drm-vmwgfx-Make-sure-backup_handle-is-always-valid.patch
 delete mode 100644 debian/patches/bugfix/x86/drm-vmwgfx-fix-integer-overflow-in-vmw_surface_define_ioctl.patch
 delete mode 100644 debian/patches/bugfix/x86/drm-vmwgfx-limit-the-number-of-mip-levels-in-vmw_gb_.patch
 delete mode 100644 debian/patches/bugfix/x86/kvm-nvmx-don-t-allow-l2-to-access-the-hardware-cr8.patch
 delete mode 100644 debian/patches/bugfix/x86/kvm-x86-fix-singlestepping-over-syscall.patch
 delete mode 100644 debian/patches/bugfix/x86/mm-Tighten-x86-dev-mem-with-zeroing-reads.patch
 create mode 100644 debian/patches/bugfix/x86/mmap-add-an-exception-to-the-stack-gap-for-hotspot-jvm.patch
 create mode 100644 debian/patches/bugfix/x86/mmap-remember-the-map_fixed-flag-as-vm_fixed.patch
 delete mode 100644 debian/patches/bugfix/x86/vmwgfx-null-pointer-dereference-in-vmw_surface_define_ioctl.patch
 create mode 100644 debian/patches/debian/cpumask-avoid-abi-change-in-3.16.50.patch
 create mode 100644 debian/patches/debian/dm-avoid-abi-change-in-3.16.50.patch
 create mode 100644 debian/patches/debian/gpio-avoid-abi-change-in-3.16.50.patch
 create mode 100644 debian/patches/debian/inet_frag-limit-abi-change-in-3.16.51.patch
 create mode 100644 debian/patches/debian/ip6_fib-avoid-abi-change-in-3.16.50.patch
 create mode 100644 debian/patches/debian/ip_fib-avoid-abi-change-in-3.16.50.patch
 create mode 100644 debian/patches/debian/mips-inst-avoid-abi-change-in-3.16.51.patch
 create mode 100644 debian/patches/debian/mm-avoid-abi-change-in-3.16.50.patch
 create mode 100644 debian/patches/debian/ptrace-avoid-abi-change-in-3.16.48.patch
 create mode 100644 debian/patches/debian/revert-scsi-scsi_error-count-medium-access-timeout-only-once.patch
 create mode 100644 debian/patches/debian/s390-mm-avoid-abi-change-in-3.16.51.patch
 create mode 100644 debian/patches/debian/sched-avoid-abi-change-in-3.16.49.patch
 create mode 100644 debian/patches/debian/ttm-avoid-abi-change-for-ttm_ref_object_add-require_existed.patch
 create mode 100644 debian/patches/debian/xfrm-avoid-abi-change-in-3.16.48.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git



More information about the Kernel-svn-changes mailing list