214a334057
Update to 4.19.132
...
Drop "nfsd: apply umask on fs without ACL support"
Drop "usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect"
Cleanup debian/changelog file
2020-07-15 22:08:35 +02:00
8f62b5cdbd
Prepare to release linux (4.19.131-2).
2020-07-11 15:44:14 +02:00
7c760522ee
Revert "mips: Add udelay lpj numbers adjustment", since it causes the build to fail with CONFIG_CPU_FREQ=y.
2020-07-11 12:22:13 +02:00
e0cd5c5655
Prepare to release linux (4.19.131-1).
2020-07-09 04:45:56 +02:00
ca964f0add
[cloud] Enable INFINIBAND configs for HyperV/Azure
...
Closes : #958300
Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
(cherry picked from commit 1315e2b78a0b65711a0346cafb02d5eef7e962e1)
2020-07-08 08:59:28 +01:00
3d19078b07
mips: Disable O32_FP64_SUPPORT
...
MSA will also be disabled on 32bit flavor, so bump abi version
since golang hasn't been migrate to FPXX yet.
This will broken the golang packages on Octeon hardware.
2020-07-07 23:56:35 +02:00
cf50d019cc
usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect (CVE-2020-15393)
2020-07-06 22:25:46 +02:00
b1721c503c
Bump ABI to 10
2020-07-06 02:13:11 +01:00
87405282a9
[rt] Drop idle task related parts of "sched: Move mmdrop to RCU on RT"
...
This conflicted with and seems to be redundant with "sched/core: Fix
illegal RCU from offline CPUs". I think the previous resolution of
this conflict can result in a double free.
2020-07-06 01:35:06 +01:00
48cd3cb583
[rt] Fix remaining conflicts with 4.9.131
2020-07-06 01:30:55 +01:00
774ebb2a37
debian/changelog: List changes in stable-rt updates
2020-07-06 00:38:08 +01:00
a114b771c8
Cleanup debian/changelog file
2020-07-04 09:12:37 +02:00
388ce30532
Drop "apparmor: don't try to replace stale label in ptraceme check"
2020-07-04 00:23:47 +02:00
c3635f6a6e
Add CVE id reference for CVE-2020-12655
2020-07-04 00:01:03 +02:00
abea5ebe1f
Update to 4.19.131
2020-07-04 00:01:03 +02:00
f6464174ec
Cleanup debian/changelog file
2020-07-04 00:01:03 +02:00
19ffc2c30e
Add CVE id reference for CVE-2020-12771
2020-07-04 00:01:03 +02:00
ded041d956
Update to 4.19.130
2020-07-04 00:01:03 +02:00
1f589648a5
[rt] Refresh "sched: Move mmdrop to RCU on RT" for context changes in 4.19.129
2020-07-04 00:01:03 +02:00
d3153c7c8e
Cleanup debian/changelog file
2020-07-04 00:01:03 +02:00
0663e7be14
Add CVE id reference for CVE-2018-20669
2020-07-04 00:01:03 +02:00
0addee703b
Add CVE id reference for CVE-2020-10768
2020-07-04 00:01:03 +02:00
93ea2e9b82
Add CVE id reference for CVE-2020-10767
2020-07-04 00:01:03 +02:00
20b94e93f5
Add CVE id reference for CVE-2020-10766
2020-07-04 00:01:03 +02:00
8b5597f990
Add CVE id reference for CVE-2019-20810
2020-07-04 00:01:03 +02:00
fe52bc14d2
Add CVE id reference for CVE-2019-18885
2020-07-04 00:01:03 +02:00
49acc7adcf
Update to 4.19.129
2020-07-04 00:01:03 +02:00
6a08eb6321
Cleanup debian/changelog file
2020-07-04 00:01:02 +02:00
aa9b994825
Add CVE id reference for CVE-2020-13974
2020-07-04 00:01:02 +02:00
acb5c7f740
Drop "x86/speculation: Add Ivy Bridge to affected list"
2020-07-04 00:01:02 +02:00
bac476321f
Drop "x86/speculation: Add SRBDS vulnerability and mitigation documentation"
2020-07-04 00:01:02 +02:00
68c22bc508
Drop "x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation"
2020-07-04 00:01:02 +02:00
8fe5ca8037
Drop "x86/cpu: Add 'table' argument to cpu_matches()"
2020-07-04 00:01:02 +02:00
1049f4bd25
Drop "x86/cpu: Add a steppings field to struct x86_cpu_id"
2020-07-04 00:01:02 +02:00
e8e969524f
Update to 4.19.128
2020-07-04 00:01:02 +02:00
f18033fc81
[rt] Update to 4.19.127-rt55
2020-07-04 00:01:02 +02:00
4def4480dc
Cleanup debian/changelog file
2020-07-04 00:01:02 +02:00
88c2a1700c
Drop "mm: Fix mremap not considering huge pmd devmap"
2020-07-04 00:01:02 +02:00
edd77f41b6
Drop "kernel/relay.c: handle alloc_percpu returning NULL in relay_open"
2020-07-04 00:01:02 +02:00
add8d4a958
Update to 4.19.127
2020-07-04 00:01:02 +02:00
bb9075b317
Cleanup debian/changelog file
2020-07-04 00:01:02 +02:00
02e36515d0
Drop "fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()"
2020-07-04 00:01:02 +02:00
ac846f6f50
Update to 4.19.126
2020-07-04 00:01:02 +02:00
e65ef48d77
Cleanup debian/changelog file
2020-07-04 00:01:02 +02:00
ce4504d627
Drop "KVM: SVM: Fix potential memory leak in svm_cpu_init()"
2020-07-04 00:01:02 +02:00
14807e183a
Update to 4.19.125
2020-07-04 00:01:02 +02:00
0d97b373b5
[rt] Update to 4.19.124-rt53
2020-07-04 00:01:02 +02:00
2539d079ec
Cleanup debian/changelog file
2020-07-04 00:01:02 +02:00
c678e8796f
Drop "netlabel: cope with NULL catmap"
2020-07-04 00:01:02 +02:00
5ce8dbd0e7
Drop "USB: gadget: fix illegal array access in binding with UDC"
2020-07-04 00:01:02 +02:00
913f8220e0
Drop "scsi: sg: add sg_remove_request in sg_write"
2020-07-04 00:01:02 +02:00
1965b86044
Update to 4.19.124
2020-07-04 00:01:02 +02:00
4fa587f9e9
Cleanup debian/changelog file
2020-07-04 00:01:02 +02:00
51a98b1181
Update to 4.19.123
2020-07-04 00:01:01 +02:00
d718b4c896
Cleanup debian/changelog file
2020-07-04 00:01:01 +02:00
5b1f1c0bc8
Update to 4.19.122
2020-07-04 00:01:01 +02:00
42d1728b42
Cleanup debian/changelog file
2020-07-04 00:01:01 +02:00
790b310863
Drop "selinux: properly handle multiple messages in selinux_netlink_send()"
2020-07-04 00:01:01 +02:00
7cbcb7e493
Drop "ALSA: pcm: oss: Place the plugin buffer overflow checks correctly"
2020-07-04 00:01:01 +02:00
c4c46fdfc9
Update to 4.19.121
2020-07-04 00:01:01 +02:00
a370ac98d7
[rt] Update to 4.19.120-rt52
2020-07-04 00:01:01 +02:00
32614f10eb
Cleanup debian/changelog file
2020-07-04 00:01:01 +02:00
635674d4ea
Drop "propagate_one(): mnt_set_mountpoint() needs mount_lock"
2020-07-04 00:01:01 +02:00
148d556059
Drop "include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap"
2020-07-04 00:01:01 +02:00
eef870f560
Update to 4.19.120
2020-07-04 00:01:01 +02:00
50c56f920e
Cleanup debian/changelog file
2020-07-04 00:01:01 +02:00
576d33f2b5
Drop pre-requisites and patches for CVE-2019-3016
2020-07-04 00:01:01 +02:00
f78b782f82
Drop "USB: core: Fix free-while-in-use bug in the USB S-Glibrary"
2020-07-04 00:01:01 +02:00
2c60bfb6ed
Drop "fs/namespace.c: fix mountpoint reference counter race"
2020-07-04 00:01:01 +02:00
46e6098888
Drop "s390/mm: fix page table upgrade vs 2ndary address mode accesses"
2020-07-04 00:01:01 +02:00
d8230a09d2
Drop "blktrace: fix dereference after null check"
2020-07-04 00:01:01 +02:00
f6a9de8ee5
Drop "blktrace: Protect q->blk_trace with RCU"
2020-07-04 00:01:01 +02:00
e7da2d7b4f
Drop "net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup"
2020-07-04 00:01:01 +02:00
a3892db44e
Drop "net: ipv6: add net argument to ip6_dst_lookup_flow"
2020-07-04 00:01:01 +02:00
b4e9757aa9
Drop "f2fs: fix to avoid memory leakage in f2fs_listxattr"
2020-07-04 00:01:01 +02:00
ed2fd52462
Update to 4.19.119
2020-07-04 00:01:01 +02:00
0c35cc337b
nfsd: apply umask on fs without ACL support
...
Closes : #962254
2020-06-26 22:55:39 +02:00
1e3e001c12
apparmor: don't try to replace stale label in ptraceme check
...
Closes : #963493
2020-06-26 22:04:24 +02:00
6da8aff445
[rt] Add new signing key for Tom Zanussi
2020-06-22 14:50:01 +02:00
ec2ba4830d
Release linux (4.19.118-2+deb10u1).
...
-----BEGIN PGP SIGNATURE-----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=8WdB
-----END PGP SIGNATURE-----
Merge tag 'debian/4.19.118-2+deb10u1' into buster
Release linux (4.19.118-2+deb10u1).
2020-06-14 10:46:38 +02:00
0da00be7e6
ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
...
Closes : #960493
2020-06-14 10:40:03 +02:00
51ce7dd8b3
Prepare to release linux (4.19.118-2+deb10u1).
2020-06-07 17:42:22 +02:00
6a8dd1c6b0
Merge branch 'buster-security' into buster-security-embargoed
2020-06-07 01:35:25 +01:00
da82e531d8
include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap
...
Closes : #960271
(cherry picked from commit a4fb2a7b76
2020-06-07 01:32:53 +01:00
22423990cd
Drop "KVM: VMX: Zero out *all* general purpose registers after VM-Exit"
...
This is not needed to fix CVE-2019-3016, and is addressing an issue
that's so far theoretical. It also needs a further fix to avoid
causing a more serious regression (depending on the compiler
behaviour).
2020-06-07 01:17:04 +01:00
ff5ad5a3d1
propagate_one(): mnt_set_mountpoint() needs mount_lock
...
A similar issue to CVE-2020-12114.
2020-06-07 00:46:11 +01:00
6e26711704
Add fixes for CVE-2019-3016
...
Cherry-pick 11 commits from the 4.19.118 including prerequisited to
adress CVE-2019-3016.
2020-06-06 10:35:47 +02:00
789f116fbc
mm: Fix mremap not considering huge pmd devmap (CVE-2020-10757)
2020-06-05 12:34:34 +02:00
50bf5b3b3d
kernel/relay.c: handle alloc_percpu returning NULL in relay_open (CVE-2019-19462)
2020-06-05 12:30:40 +02:00
7fc7c96d6e
fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (CVE-2020-10732)
2020-06-03 07:42:07 +02:00
2222852cc1
netlabel: cope with NULL catmap (CVE-2020-10711)
2020-06-02 20:27:49 +02:00
888eb1f799
USB: gadget: fix illegal array access in binding with UDC (CVE-2020-13143)
2020-05-29 21:35:13 +02:00
aefd886eef
scsi: sg: add sg_remove_request in sg_write (CVE-2020-12770)
2020-05-29 21:23:18 +02:00
92ed2f689a
[x86] KVM: SVM: Fix potential memory leak in svm_cpu_init() (CVE-2020-12768)
2020-05-29 14:03:17 +02:00
2fe68e87e7
USB: core: Fix free-while-in-use bug in the USB S-Glibrary (CVE-2020-12464)
2020-05-29 13:49:18 +02:00
34284455a6
fs/namespace.c: fix mountpoint reference counter race (CVE-2020-12114)
2020-05-28 23:34:11 +02:00
b3b40efebd
selinux: properly handle multiple messages in selinux_netlink_send() (CVE-2020-10751)
2020-05-28 23:02:50 +02:00
a4fb2a7b76
include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap
...
Closes : #960271
2020-05-13 17:45:56 +02:00
195b1745c4
Avoid an ABI change for SRBDS
...
Adding the x86_cpu_id::steppings field is an ABI change. It doesn't
seem worth the trouble of another ABI bump just to be able to report
some potential future CPU steppings as invulnerable. Until we have
other change that require an ABI bump, we'll match the affected models
regardless of stepping.
Keep the reverted patch in the queue so that the reverting patch will
continue to be applied when we rebase onto a new stable update.
2020-05-05 02:21:33 +01:00
0f2a83859c
[x86] Add support for mitigation of SRBDS (CVE-2020-0543)
...
Apply the current version of the backport to 4.19.
2020-05-05 02:07:33 +01:00
Salvatore Bonaccorso
Aurelien Jarno
Luca Boccassi
YunQiang Su
Ben Hutchings