|
|
|
@ -60,6 +60,255 @@ linux (4.9~rc3-1~exp1) experimental; urgency=medium
|
|
|
|
|
|
|
|
|
|
-- Ben Hutchings <ben@decadent.org.uk> Thu, 03 Nov 2016 16:51:55 -0600
|
|
|
|
|
|
|
|
|
|
linux (4.8.11-1) unstable; urgency=medium
|
|
|
|
|
|
|
|
|
|
* New upstream stable update:
|
|
|
|
|
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8
|
|
|
|
|
- net: fec: set mac address unconditionally
|
|
|
|
|
- net: pktgen: fix pkt_size
|
|
|
|
|
- net/sched: act_vlan: Push skb->data to mac_header prior calling
|
|
|
|
|
skb_vlan_*() functions
|
|
|
|
|
- net: Add netdev all_adj_list refcnt propagation to fix panic
|
|
|
|
|
- packet: call fanout_release, while UNREGISTERING a netdev
|
|
|
|
|
- netlink: do not enter direct reclaim from netlink_dump()
|
|
|
|
|
- drivers/ptp: Fix kernel memory disclosure
|
|
|
|
|
- net_sched: reorder pernet ops and act ops registrations
|
|
|
|
|
- ipv6: tcp: restore IP6CB for pktoptions skbs
|
|
|
|
|
- net: phy: Trigger state machine on state change and not polling.
|
|
|
|
|
- ip6_tunnel: fix ip6_tnl_lookup
|
|
|
|
|
- ipv6: correctly add local routes when lo goes up
|
|
|
|
|
- IB/ipoib: move back IB LL address into the hard header
|
|
|
|
|
- net/mlx4_en: fixup xdp tx irq to match rx
|
|
|
|
|
- net: pktgen: remove rcu locking in pktgen_change_name()
|
|
|
|
|
- bridge: multicast: restore perm router ports on multicast enable
|
|
|
|
|
- switchdev: Execute bridge ndos only for bridge ports
|
|
|
|
|
- rtnetlink: Add rtnexthop offload flag to compare mask
|
|
|
|
|
- net: core: Correctly iterate over lower adjacency list
|
|
|
|
|
- net: add recursion limit to GRO
|
|
|
|
|
- ipv4: disable BH in set_ping_group_range()
|
|
|
|
|
- ipv4: use the right lock for ping_group_range
|
|
|
|
|
- net: fec: Call swap_buffer() prior to IP header alignment
|
|
|
|
|
- net: sctp, forbid negative length
|
|
|
|
|
- sctp: fix the panic caused by route update
|
|
|
|
|
- udp: fix IP_CHECKSUM handling
|
|
|
|
|
- [x86] netvsc: fix incorrect receive checksum offloading
|
|
|
|
|
- net: ipv6: Do not consider link state for nexthop validation
|
|
|
|
|
- net sched filters: fix notification of filter delete with proper handle
|
|
|
|
|
- sctp: validate chunk len before actually using it (CVE-2016-9555)
|
|
|
|
|
- ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit()
|
|
|
|
|
- packet: on direct_xmit, limit tso and csum to supported devices
|
|
|
|
|
- [powerpc] Update parameters for csum_tcpudp_magic & csum_tcpudp_nofold
|
|
|
|
|
- [arm64, armhf] usb: dwc3: gadget: properly account queued requests
|
|
|
|
|
- scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough)
|
|
|
|
|
devices
|
|
|
|
|
- scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression
|
|
|
|
|
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.9
|
|
|
|
|
- ALSA: info: Return error for invalid read/write
|
|
|
|
|
- ALSA: info: Limit the proc text input size
|
|
|
|
|
- dib0700: fix nec repeat handling
|
|
|
|
|
- mm, frontswap: make sure allocated frontswap map is assigned
|
|
|
|
|
- shmem: fix pageflags after swapping DMA32 object
|
|
|
|
|
- swapfile: fix memory corruption via malformed swapfile
|
|
|
|
|
- mm: hwpoison: fix thp split handling in memory_failure()
|
|
|
|
|
- mm/hugetlb: fix huge page reservation leak in private mapping error paths
|
|
|
|
|
- coredump: fix unfreezable coredumping task
|
|
|
|
|
- [s390x] hypfs: Use get_free_page() instead of kmalloc to ensure page
|
|
|
|
|
alignment
|
|
|
|
|
- PCI: Don't attempt to claim shadow copies of ROM
|
|
|
|
|
- [x86] pinctrl: cherryview: Serialize register access in suspend/resume
|
|
|
|
|
- [x86] pinctrl: cherryview: Prevent possible interrupt storm on resume
|
|
|
|
|
- cpupower: Correct return type of cpu_power_is_cpu_online() in cpufreq-set
|
|
|
|
|
- mmc: sdhci: Fix CMD line reset interfering with ongoing data transfer
|
|
|
|
|
- mmc: sdhci: Fix unexpected data interrupt handling
|
|
|
|
|
- mmc: mmc: Use 500ms as the default generic CMD6 timeout
|
|
|
|
|
- [arm64, armhf] usb: dwc3: Fix error handling for core init
|
|
|
|
|
- USB: cdc-acm: fix TIOCMIWAIT
|
|
|
|
|
- usb: gadget: u_ether: remove interrupt throttling
|
|
|
|
|
- drbd: Fix kernel_sendmsg() usage - potential NULL deref
|
|
|
|
|
- cdc-acm: fix uninitialized variable
|
|
|
|
|
- scsi: qla2xxx: Fix scsi scan hang triggered if adapter fails during init
|
|
|
|
|
- scsi: mpt3sas: Fix for block device of raid exists even after deleting
|
|
|
|
|
raid disk
|
|
|
|
|
- scsi: scsi_dh_alua: fix missing kref_put() in alua_rtpg_work()
|
|
|
|
|
- scsi: scsi_dh_alua: Fix a reference counting bug
|
|
|
|
|
- [arm64] KVM: vgic: Prevent access to invalid SPIs
|
|
|
|
|
- drm/radeon: disable runtime pm in certain cases
|
|
|
|
|
- [x86] drm/i915: Respect alternate_ddc_pin for all DDI ports
|
|
|
|
|
- [x86] drm/i915/dp: BDW cdclk fix for DP audio
|
|
|
|
|
- [x86] drm/i915/dp: Extend BDW DP audio workaround to GEN9 platforms
|
|
|
|
|
- [x86] drm/amdgpu: disable runtime pm in certain cases
|
|
|
|
|
- xprtrdma: use complete() instead complete_all()
|
|
|
|
|
- xprtrdma: Fix DMAR failure in frwr_op_map() after reconnect
|
|
|
|
|
- [amd64] iommu/amd: Free domain id when free a domain of struct
|
|
|
|
|
dma_ops_domain
|
|
|
|
|
- [x86] iommu/vt-d: Fix dead-locks in disable_dmar_iommu() path
|
|
|
|
|
- [x86] agp/intel: Flush chipset writes after updating a single PTE
|
|
|
|
|
- watchdog: core: Fix devres_alloc() allocation size
|
|
|
|
|
- perf top: Fix refreshing hierarchy entries on TUI
|
|
|
|
|
- [x86] mei: bus: fix received data size check in NFC fixup
|
|
|
|
|
- svcrdma: Skip put_page() when send_reply() fails
|
|
|
|
|
- svcrdma: Tail iovec leaves an orphaned DMA mapping
|
|
|
|
|
- nvme: Delete created IO queues on reset
|
|
|
|
|
- [s390x] dumpstack: restore reliable indicator for call traces
|
|
|
|
|
- hwrng: core - Don't use a stack buffer in add_early_randomness()
|
|
|
|
|
- i40e: fix call of ndo_dflt_bridge_getlink()
|
|
|
|
|
- [arm64] mmc: sdhci-msm: Fix error return code in sdhci_msm_probe()
|
|
|
|
|
- [x86] ACPI / APEI: Fix incorrect return value of ghes_proc()
|
|
|
|
|
- ACPI/PCI/IRQ: assign ISA IRQ directly during early boot stages
|
|
|
|
|
- ACPI/PCI: pci_link: penalize SCI correctly
|
|
|
|
|
- ACPI/PCI: pci_link: Include PIRQ_PENALTY_PCI_USING for ISA IRQs
|
|
|
|
|
- batman-adv: Modify neigh_list only with rcu-list functions
|
|
|
|
|
- [armel, armhf] gpio/mvebu: Use irq_domain_add_linear
|
|
|
|
|
- ASoC: Intel: Skylake: Always acquire runtime pm ref on unload
|
|
|
|
|
- [armhf] ASoC: sun4i-codec: return error code instead of NULL when
|
|
|
|
|
create_card fails
|
|
|
|
|
- memcg: prevent memcg caches to be both OFF_SLAB & OBJFREELIST_SLAB
|
|
|
|
|
- libceph: fix legacy layout decode with pool 0
|
|
|
|
|
- [x86] drm/amdgpu: fix fence slab teardown
|
|
|
|
|
- [x86] drm/amdgpu: fix a vm_flush fence leak
|
|
|
|
|
- [x86] drm/i915: Fix mismatched INIT power domain disabling during
|
|
|
|
|
suspend
|
|
|
|
|
- netfilter: fix namespace handling in nf_log_proc_dostring
|
|
|
|
|
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.10
|
|
|
|
|
- dctcp: avoid bogus doubling of cwnd after loss
|
|
|
|
|
- net: clear sk_err_soft in sk_clone_lock()
|
|
|
|
|
- net: mangle zero checksum in skb_checksum_help()
|
|
|
|
|
- ip6_tunnel: Clear IP6CB in ip6tunnel_xmit()
|
|
|
|
|
- tcp: fix potential memory corruption
|
|
|
|
|
- ipv4: allow local fragmentation in ip_finish_output_gso()
|
|
|
|
|
- tcp: fix return value for partial writes
|
|
|
|
|
- dccp: do not release listeners too soon
|
|
|
|
|
- dccp: do not send reset to already closed sockets
|
|
|
|
|
- dccp: fix out of bound access in dccp_v4_err()
|
|
|
|
|
- ipv6: dccp: fix out of bound access in dccp_v6_err()
|
|
|
|
|
- ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped
|
|
|
|
|
- sctp: assign assoc_id earlier in __sctp_connect
|
|
|
|
|
- bpf: fix htab map destruction when extra reserve is in use
|
|
|
|
|
- net: icmp6_send should use dst dev to determine L3 domain
|
|
|
|
|
- fib_trie: Correct /proc/net/route off by one error
|
|
|
|
|
- sock: fix sendmmsg for partial sendmsg
|
|
|
|
|
- net: icmp_route_lookup should use rt dev to determine L3 domain
|
|
|
|
|
- net: __skb_flow_dissect() must cap its return value
|
|
|
|
|
- ipv4: use new_gw for redirect neigh lookup
|
|
|
|
|
- tcp: take care of truncations done by sk_filter() (CVE-2016-8645)
|
|
|
|
|
- Revert "include/uapi/linux/atm_zatm.h: include linux/time.h"
|
|
|
|
|
(Closes: #844491)
|
|
|
|
|
- Revert "bnx2: Reset device during driver initialization"
|
|
|
|
|
- bnx2: Wait for in-flight DMA to complete at probe stage
|
|
|
|
|
- sctp: change sk state only when it has assocs in sctp_shutdown
|
|
|
|
|
- [arm64, armhf] net: stmmac: Fix lack of link transition for fixed PHYs
|
|
|
|
|
- [sparc] Handle negative offsets in arch_jump_label_transform
|
|
|
|
|
- [sparc64] Handle extremely large kernel TSB range flushes sanely.
|
|
|
|
|
- [sparc64] Fix illegal relative branches in hypervisor patched TLB code.
|
|
|
|
|
- [sparc64] Fix instruction count in comment for
|
|
|
|
|
__hypervisor_flush_tlb_pending.
|
|
|
|
|
- [sparc64] Fix illegal relative branches in hypervisor patched TLB
|
|
|
|
|
cross-call code.
|
|
|
|
|
- [sparc64] Handle extremely large kernel TLB range flushes more
|
|
|
|
|
gracefully.
|
|
|
|
|
- [sparc64] Delete __ret_efault.
|
|
|
|
|
- [sparc64] Prepare to move to more saner user copy exception handling.
|
|
|
|
|
- [sparc64] Convert copy_in_user to accurate exception reporting.
|
|
|
|
|
- [sparc64] Convert GENcopy_{from,to}_user to accurate exception
|
|
|
|
|
reporting.
|
|
|
|
|
- [sparc64] Convert U1copy_{from,to}_user to accurate exception reporting.
|
|
|
|
|
- [sparc64] Convert NG4copy_{from,to}_user to accurate exception
|
|
|
|
|
reporting.
|
|
|
|
|
- [sparc64] Convert NGcopy_{from,to}_user to accurate exception reporting.
|
|
|
|
|
- [sparc64] Convert NG2copy_{from,to}_user to accurate exception
|
|
|
|
|
reporting.
|
|
|
|
|
- [sparc64] Convert U3copy_{from,to}_user to accurate exception reporting.
|
|
|
|
|
- [sparc64] Delete now unused user copy assembler helpers.
|
|
|
|
|
- [sparc64] Delete now unused user copy fixup functions.
|
|
|
|
|
- usb: gadget: f_fs: edit epfile->ep under lock
|
|
|
|
|
- usb: gadget: f_fs: stop sleeping in ffs_func_eps_disable
|
|
|
|
|
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.11
|
|
|
|
|
- [x86] cpu/AMD: Fix cpu_llc_id for AMD Fam17h systems
|
|
|
|
|
- [x86] KVM: fix missed SRCU usage in kvm_lapic_set_vapic_addr
|
|
|
|
|
- [x86] KVM: Disable irq while unregistering user notifier
|
|
|
|
|
- ftrace: Ignore FTRACE_FL_DISABLED while walking dyn_ftrace records
|
|
|
|
|
- ftrace: Add more checks for FTRACE_FL_DISABLED in processing ip records
|
|
|
|
|
- genirq: Use irq type from irqdata instead of irqdesc
|
|
|
|
|
- fuse: fix fuse_write_end() if zero bytes were copied
|
|
|
|
|
- IB/rdmavt: rdmavt can handle non aligned page maps
|
|
|
|
|
- IB/hfi1: Fix rnr_timer addition
|
|
|
|
|
- [x86] mfd: intel-lpss: Do not put device in reset state on suspend
|
|
|
|
|
- [armhf] mfd: stmpe: Fix RESET regression on STMPE2401
|
|
|
|
|
- can: bcm: fix warning in bcm_connect/proc_register
|
|
|
|
|
- gpio: do not double-check direction on sleeping chips
|
|
|
|
|
- [x86] ALSA: usb-audio: Fix use-after-free of usb_device at disconnect
|
|
|
|
|
- [x86] ALSA: hda - add a new condition to check if it is thinkpad
|
|
|
|
|
- ALSA: hda - Fix mic regression by ASRock mobo fixup
|
|
|
|
|
- [armhf] i2c: mux: fix up dependencies
|
|
|
|
|
- [armhf] i2c: i2c-mux-pca954x: fix deselect enabling for device-tree
|
|
|
|
|
- kbuild: add -fno-PIE
|
|
|
|
|
- scripts/has-stack-protector: add -fno-PIE
|
|
|
|
|
- x86/kexec: add -fno-PIE
|
|
|
|
|
- kbuild: Steal gcc's pie from the very beginning
|
|
|
|
|
- ext4: sanity check the block and cluster size at mount time
|
|
|
|
|
- [armhf] dts: imx53-qsb: Fix regulator constraints
|
|
|
|
|
- crypto: caam - do not register AES-XTS mode on LP units
|
|
|
|
|
- [powerpc*] Fix setting of AIL in hypervisor mode
|
|
|
|
|
- [x86] drm/amdgpu: Attach exclusive fence to prime exported bo's.
|
|
|
|
|
- [x86] drm/i915: Refresh that status of MST capable connectors in
|
|
|
|
|
->detect()
|
|
|
|
|
- [x86] drm/i915: Assume non-DP++ port if dvo_port is HDMI and there's no
|
|
|
|
|
AUX ch specified in the VBT
|
|
|
|
|
- virtio-net: drop legacy features in virtio 1 mode
|
|
|
|
|
- [armhf] clk: imx: fix integer overflow in AV PLL round rate
|
|
|
|
|
- [armhf] rtc: omap: Fix selecting external osc
|
|
|
|
|
- iwlwifi: pcie: fix SPLC structure parsing
|
|
|
|
|
- iwlwifi: pcie: mark command queue lock with separate lockdep class
|
|
|
|
|
- iwlwifi: mvm: fix netdetect starting/stopping for unified images
|
|
|
|
|
- iwlwifi: mvm: fix d3_test with unified D0/D3 images
|
|
|
|
|
- iwlwifi: mvm: wake the wait queue when the RX sync counter is zero
|
|
|
|
|
- mfd: core: Fix device reference leak in mfd_clone_cell
|
|
|
|
|
- sunrpc: svc_age_temp_xprts_now should not call setsockopt non-tcp
|
|
|
|
|
transports
|
|
|
|
|
- uwb: fix device reference leaks
|
|
|
|
|
- PM / sleep: fix device reference leak in test_suspend
|
|
|
|
|
- PM / sleep: don't suspend parent when async child suspend_{noirq,
|
|
|
|
|
late} fails
|
|
|
|
|
- perf hists: Fix column length on --hierarchy
|
|
|
|
|
- IB/mlx4: Check gid_index return value
|
|
|
|
|
- IB/mlx4: Fix create CQ error flow
|
|
|
|
|
- IB/mlx5: Validate requested RQT size
|
|
|
|
|
- IB/mlx5: Use cache line size to select CQE stride
|
|
|
|
|
- IB/mlx5: Fix memory leak in query device
|
|
|
|
|
- IB/mlx5: Fix fatal error dispatching
|
|
|
|
|
- IB/mlx5: Fix NULL pointer dereference on debug print
|
|
|
|
|
- IB/core: Avoid unsigned int overflow in sg_alloc_table
|
|
|
|
|
- IB/hfi1: Remove incorrect IS_ERR check
|
|
|
|
|
- IB/uverbs: Fix leak of XRC target QPs
|
|
|
|
|
- IB/cm: Mark stale CM id's whenever the mad agent was unregistered
|
|
|
|
|
- netfilter: nft_dynset: fix element timeout for HZ != 1000
|
|
|
|
|
- [arm64, armhf] gpio: pca953x: Move memcpy into mutex lock for set
|
|
|
|
|
multiple
|
|
|
|
|
- [arm64, armhf] gpio: pca953x: Fix corruption of other gpios in
|
|
|
|
|
set_multiple.
|
|
|
|
|
|
|
|
|
|
[ Salvatore Bonaccorso ]
|
|
|
|
|
* Bump ABI to 2 and remove ABI reference for 4.8.0-1
|
|
|
|
|
* xfs: Propagate dentry down to inode_change_ok()
|
|
|
|
|
* ceph: Propagate dentry down to inode_change_ok()
|
|
|
|
|
* fuse: Propagate dentry down to inode_change_ok()
|
|
|
|
|
* fs: Give dentry to inode_change_ok() instead of inode
|
|
|
|
|
* fs: Avoid premature clearing of capabilities (CVE-2015-1350)
|
|
|
|
|
(Closes: #770492)
|
|
|
|
|
* mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650)
|
|
|
|
|
* vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083
|
|
|
|
|
CVE-2016-9084)
|
|
|
|
|
* mnt: Add a per mount namespace limit on the number of mounts
|
|
|
|
|
(CVE-2016-6213)
|
|
|
|
|
|
|
|
|
|
[ Ben Hutchings ]
|
|
|
|
|
* [arm64] Enable more drivers for X-Gene (Really closes: #840061):
|
|
|
|
|
- DMA: Enable XGENE_DMA as module
|
|
|
|
|
- EDAC: Enable EDAC and EDAC_MM_EDAC, EDAC_XGENE as modules
|
|
|
|
|
* [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575)
|
|
|
|
|
|
|
|
|
|
-- Salvatore Bonaccorso <carnil@debian.org> Fri, 02 Dec 2016 06:35:22 +0100
|
|
|
|
|
|
|
|
|
|
linux (4.8.7-1) unstable; urgency=medium
|
|
|
|
|
|
|
|
|
|
* New upstream stable update:
|
|
|
|
|