Commit Graph

6811 Commits

Author SHA1 Message Date
Salvatore Bonaccorso 93304bd632 net: handle no dst on skb in icmp6_send (CVE-2016-9919) 2016-12-10 07:42:41 +01:00
Salvatore Bonaccorso d2f4158d99 Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576) 2016-12-10 07:35:50 +01:00
Salvatore Bonaccorso 56659f5080 net: ping: check minimum size on ICMP header length (CVE-2016-8399) 2016-12-10 07:29:51 +01:00
Salvatore Bonaccorso 9b4f84faec Ignore ABI changes in KVM 2016-12-09 23:05:09 +01:00
Ben Hutchings 33f253b15d [amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE
There are still binaries in stable that use vsyscall (via dietlibc).
Since dietlibc is statically linked and some of the packages are also
backported from unstable, we can't use versioned Breaks to force
upgrades.
2016-12-09 13:29:34 +00:00
Salvatore Bonaccorso 3a2602da33 Add ABI reference for 4.8.0-2 2016-12-09 06:22:56 +01:00
Salvatore Bonaccorso be8be2cb5f net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793) 2016-12-08 19:28:56 +01:00
Salvatore Bonaccorso 3b66b4fcef packet: fix race condition in packet_set_ring (CVE-2016-8655) 2016-12-07 10:34:33 +01:00
Salvatore Bonaccorso 27fc4207c6 tipc: check minimum bearer MTU (CVE-2016-8632) 2016-12-07 10:31:56 +01:00
Salvatore Bonaccorso 59ebe22f2f Update to 4.8.12 2016-12-06 21:19:22 +01:00
Roger Shimizu 8f06e2bdc6 [armel] dts: marvell: fix number of sata port for linkstation ls-gl
Closes: #845611
2016-12-06 08:38:19 +09:00
Uwe Kleine-König 086dccbdfe [armhf] dts: armada-385: add support for Turris Omnia 2016-12-04 21:18:15 +01:00
Salvatore Bonaccorso 489dc40883 Prepare to release linux (4.8.11-1). 2016-12-02 06:35:22 +01:00
Salvatore Bonaccorso ceb75c4337 mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213) 2016-11-30 16:15:29 +01:00
Salvatore Bonaccorso b67bd212fa vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084) 2016-11-30 09:15:19 +01:00
Salvatore Bonaccorso 609f818472 mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) 2016-11-30 09:04:11 +01:00
Salvatore Bonaccorso f82ecfdc9e Update to 4.8.11 2016-11-29 20:30:13 +01:00
Salvatore Bonaccorso 3536d5d7a6 Update to 4.8.10 2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso a559c41683 Update to 4.8.9 2016-11-26 17:37:18 +01:00
Salvatore Bonaccorso b69731a96b Add CVE reference for CVE-2016-9555 2016-11-23 06:21:23 +01:00
Ben Hutchings 85deb5386a [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575) 2016-11-16 21:35:16 +00:00
Ben Hutchings 2d21aaf508 [arm64] Enable more drivers for X-Gene (Really closes: #840061) 2016-11-16 21:22:18 +00:00
Ben Hutchings 96f3d8b5c3 Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" (Closes: #844491) 2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso b7117071e0 fs: Avoid premature clearing of capabilities (CVE-2015-1350)
Closes: #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso b048cc5a7c fs: Give dentry to inode_change_ok() instead of inode 2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso 2e74b80287 fuse: Propagate dentry down to inode_change_ok() 2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso 055cd5a2d1 ceph: Propagate dentry down to inode_change_ok() 2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso 2683f37d06 xfs: Propagate dentry down to inode_change_ok() 2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso b7d167eabc Fix changelog entry for removal of ABI reference
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
Salvatore Bonaccorso 17805e05b4 Bump ABI to 2 and remove ABI reference for 4.8.0-2 2016-11-16 18:51:15 +01:00
Salvatore Bonaccorso 26676cdca0 Update to 4.8.8 2016-11-15 22:32:40 +01:00
Ben Hutchings 343333fea3 Prepare to release linux (4.8.7-1). 2016-11-13 04:38:09 +00:00
Ben Hutchings 772d6648d5 debian/control: Build-Depend on a recent debhelper instead of dh-systemd 2016-11-13 04:38:06 +00:00
Ben Hutchings 15da3c4884 [arm64] Enable more drivers for X-Gene (Closes: #840061) 2016-11-13 04:28:46 +00:00
Ben Hutchings f8420f98bc Delete some garbage from the upstream shortlog for 4.8.7 2016-11-13 04:01:19 +00:00
Ben Hutchings e1b8f7e7ad libcpupower-dev: Depend on libcpupower1 (Closes: #840852) 2016-11-13 04:00:45 +00:00
Ben Hutchings 943a798a07 IB: Enable INFINIBAND_RDMAVT as module
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes: #843792)
2016-11-13 04:00:45 +00:00
Ben Hutchings d442f1a220 Note some bug closures for 4.8.6 and 4.8.7 2016-11-13 04:00:45 +00:00
Salvatore Bonaccorso e8880932f8 Update to 4.8.7 2016-11-11 20:00:01 +01:00
Salvatore Bonaccorso d99e060fe3 [x86] kvm: Check memopp before dereference (CVE-2016-8630) 2016-11-06 17:54:35 +01:00
Ben Hutchings 790f2d1ab5 perf: Disable use of libcrypto (Closes: #843199) 2016-11-04 15:41:12 -06:00
Ben Hutchings d882885835 cpupower: Fix checks for CPU existence (Closes: #843071) 2016-11-03 16:11:35 -06:00
Ben Hutchings 18036575a7 HID: Enable HID_ALPS, HID_ASUS (Closes: #843085), HID_CMEDIA as modules 2016-11-03 15:03:01 -06:00
Ben Hutchings 4975a766e7 [rt] Update to 4.8.6-rt5 2016-11-03 12:16:32 -06:00
Ben Hutchings 0acd08301d Update to 4.8.6 2016-11-03 12:08:20 -06:00
Ben Hutchings 8e552ff10c debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)
2016-11-02 12:21:30 -06:00
Ben Hutchings 4c9bb889ce Prepare to release linux (4.8.5-1). 2016-10-28 20:34:09 +01:00
Ben Hutchings 64e2286fbd Update to 4.8.5
Drop patches applied upstream and move changelog text for the bugs
under the stable update.
2016-10-28 20:31:36 +01:00
Ben Hutchings a5f9f74d46 Set ABI to 1 and version to 4.8.4-1 2016-10-28 20:20:49 +01:00
Ben Hutchings e34c6c01c6 [x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled (Closes: #835160) 2016-10-28 20:18:08 +01:00